Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“My entire f**king saved list is unavailable until I pay again NEXT month.”
Google Play · 1/5 · 2026-09-16

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3081733041

Proof data

Record hash (SHA-256): c79f5f3d25fdf86e9fe983ecb5a6a9ffe45c767e8a355aee2f8294174bed7006
Signature (Ed25519, base64): M53+Ut4VSxeivHP7j9YVwzz67rCGA6TYX30NngPgctf4Y/7WN1DMLyvZJU9x84sHgWq5iKVLSPbiF7FsdUdFDA==
Merkle root: c5671f9a997da9b293a79ebe58b20e4534ae608121169f15a5adc358d42ed147
Merkle path: ["c7a6bcf3db69a439798f0fec9fc4caa20cf5fd3a7991bbb087978dda43fbac90","bf7812831455116cf71e44d7d90a3e5e18dd09b0a6d4bd087c69bc6936138fcc","86f400c95ad8749f955807f4887e91dc38cde7fdd4bf90e8732377183b41d71b","b38126f1b0ece7e91e146262c7242677823735c03f4f9e4969b8f60db0433981","1e595c3fee5d0834291ea020fcfda5bacf71fba7973a6207ca812eccd7a240e1","960330c3f6b0023c66b752bb60fe2f09c64613cc99828f7da95e020a8a602553","c7b5b94a78b828141a5642966d934e6998feee233d37c2336775dbcec5a15b1f","b6f993dab04b531f6466644867af80c7b5672b641622533e9603012f6a07f50b","373ad6293730016df5e3468dd4990fa6229401101f3d29091bef0cd9cc6b1739","9d339f7e2d09a793a4ba71a37e61a5eb381324a02e87862eafb545b455c7d65c","4cdc8f0ffcedd80f37999351976d392fb7b87843cf28dee99942963f228d1695","a4e64ef32282e4add189c71e21dacdaf908266188def63a11aade425c33068c2","388888fccda291caa041510ab350a71f4e5bb952b0c83f6d43c5ee2881af2c2a","8621becbd314bf961e51e6037fd253dfa12e66cb7b2d1c68d51addc52321e8a9","b178a1b83338c84f1a44bf8fe330ca4b62fad9df75daa4f4e38c0d04e336f831"]
Anchored: 2026-10-05
Public log entry: search.sigstore.dev, log index 3081733041 · entry 108e9186e8c5677a0bbb…
Expected log hash: 88ab7ac46d4614551fa6e665889f054d7592b15d91016a45621b5c46a7ae8e2f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791174108170","kind":"published-quote","locale":"en","page":"theme:everand/billing/en","quote":"My entire f**king saved list is unavailable until I pay again NEXT month.","rating":1,"review_date":"2026-09-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5671f9a997d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.