Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“THEY TAKE MONEY FROM YOUR ACCOUNT”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3029042635

Proof data

Record hash (SHA-256)

c4d6b14468b9a1d625eb094a1cbecb94f6e9e71be6bbd6d3f7e92f7ab776bd71

Signature (Ed25519, base64)

XqkHpbcTRVouTFZTQILKqf8qMXDH0VAwLe3cCv1nCAWWdJfHIU1szw3ThY1ltPgmKd1zQ8aBc+Vs1hgPdsrlBw==

Merkle root

c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d

Merkle path

["c4d67ee3aa053a4220020560eef478d959569d5fcba6029fb4001d542762c20a","d4342e04cb02a884d6ba24a93a7e80307006e14eaa8dbb8bb82bd4862b7d5475","bc208667d9842731d46ed69f50714435298f523c4ee745b823e12d851167ff9c","c8249c19d7e52f7083066ba1a9d26cfd327942cb81604351c2b609b3ec891c42","e953c0f798d0da04740893ed0685b6d115678608c3f832da03373bcb6ad71da2","ac7dd400b060e9c7d5f5a97cea11e48cef34696d71797ab7769d8d67b2ab5b14","72af2929ec2a6557a51c4ff864c0de44367fb4f9a823d29c763163f1152c7596","ae071c9fc1372d5655534f5e42c1c2f9a2a300eaeb8d071ebab6f8c2b7f30d10","f0427e5b44e2cdae52dc2eb40e2e60e087437ceab52627535c8d05fe6438645d","da4491ab1405f3bb7250589b54fe36c6e524771059d6a810c93010ce6b9a0bd8","3351a536c7f48173146e5c3371000b4ed64f4ac34786c8f03cb04f2a9153c9b4","a053a1075cbdeb4806ef4345aac27ccb08b07f974dcab0d7af22da301fda4f00","8d810c8f9c62441734c87c36156dcad8983bbe1dc90b3b2854fb49cc7a54d2bd","1616c16ecfa49e18821de7767bf3fa1e1a6fd3ec2fa090ad2f10f8770da252c6","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]

Anchored

2026-10-01

Public log entry

search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…

Expected log hash

38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790741815621","kind":"published-quote","locale":"en","page":"theme:everand/billing/en","quote":"THEY TAKE MONEY FROM YOUR ACCOUNT","rating":1,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.