Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“we can charge you for a servis you don't actually want”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3122521988

Proof data

Record hash (SHA-256)

c68affbc0bc13de8e99ccd8e3c2a0bf5e39ec51e2b658b90a2a16c9faf05b842

Signature (Ed25519, base64)

47n6MzozBYaeKnlCKrpQdoTspO1STZ/E+x4oFiIMvQ1ylR1XvENnGeQl9dq6qT84HwElIkPI/GgxrNpv7D19Dw==

Merkle root

feb82b7f8aea18b46b248fac49fdc21a6b138fec64dc2fa12c4b3c7a81799706

Merkle path

["c68cdbe97cb94be5bdcc3385f4f6d38ed42c791a79ddc58b5b73ffde4d4f010e","b11a422282678ffbf4b277ea6b816704f3b1f089f4776e699a5728fb3c7bc660","f1da86dfbd5a8fc72aa752e9d36a94977829a83914bdfd219f8129f8a7f9fa11","7e03c1fabc39c5bcfdbba3cb4d615f0688b024210b45226e4dd9305a7bae797f","88961e5c2374b3313a06ead886ceab15ee4c213a897eba56c95252f877046436","fc74f7febb7b6e7c4061980977ec269c28a7b5233a2991a0ce2a0f3450f7733b","e0d202a49b8b42e9ce62080e4827a07f392ba7c452e43766766057b3b052496f","8090d89e6ec407b2e050d56cc102f980abbe4a94f1897a4cde8ae9c5fccca152","4f5f84fcba7bc44709f59c06537d7cc3ae1b6482016a5c37b02c8721a91c2211","7ff5fb8efcba20eb9a63865bb3de6da9a6c4c1e71638e9edbbc70164df2f4089","8b6784a00d07424c6c28b9d6903adcae283891e35ad9c9104c02d55bd87dd00c","6f1d43166dd7947327ab28023ec82f498a15f651f578f1b1f58d9f118c838f59","17e2a55c2f83259cfc4972d49f14c6d98843965d695e0ba0cc7ad953ca852fc6","e6a39c1e3a8ee923d6c694e5c8148fd9036767f27173ccfd95c1fa41870eb82d","c63ac18932e0255ab2763f8017dd7d3a8a4963e42e4624815bb352fabc7bb17d"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3122521988 · entry 108e9186e8c5677afa72…

Expected log hash

9fa0d177312c5b0b22ba9dc313f3316134d71d179dc19912df4abe4610de68bf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791343163559","kind":"published-quote","locale":"en","page":"theme:everand/billing/en","quote":"we can charge you for a servis you don't actually want","rating":1,"review_date":"2026-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (feb82b7f8aea…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.