Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“ZERO advertisements”
Google Play · 5/5 · 2026-06-01

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2544092674

Proof data

Record hash (SHA-256): c869577a6efd421497920408031e0455385a5a9c362c76272682c2caf66a7cf7
Signature (Ed25519, base64): l2ZpqQcNYQVLL/mJFKHW3u16xgkFBAq5paG2QJSLm0icdKE15A/sHD0CWEOv0P2ULL5H07rtBsMHVErFnNloAA==
Merkle root: fc0474f2ab9253f8c52a81a0b2f1ae382f5f022f9b54f4e3fe06eadaf19fcf31
Merkle path: ["c8686b15da2dffa820ffc06992be65fecead272750ef56c3a080fcc71e4c18d7","6100a79e2925dfa0b0b41682c4ecb0e3619e12d4a38b3077361cb3b7d0fc3d48","6ee6b6c2c8f7e0b961e20ffd8f6c2cc079067c6e7b4fa75585779c473dadc2ec","5946dd14235bc46d1319433a67422c50d11fae1677f76d4b0527288798017118","34dfae440a6045024a407e63fd782479317401fe5eb46be8f9d3b872cf596782","4573c1d2dcf6eff2f86810ec1f11452a647b36a9be3d2d7f281e2294153546f8","f4c3460658a11972e48b968181386d50c58e47a353ab7642362d74a567321ea0","d9506e59abce5451ee4ca75aebb5fabb7448fe12791a204283558df2514457de","07254131a4c365c7dc052145266df1426b65a1d021377d3a9dcc1dd2df4b4065","081d84675c9ba146ae312e9a471ffa0b99e67a4968e0056f3a20983f80e99dc2","affa24ef9551eec3d5587fa0a77f069f896662143a1f7f17df9839f6fa56aca4","50b4808392ba36bf75ec84342ffa7c6f09dd7c6e8c521c42ec22d3c2d1ba4b43","0e4031829bdeb15da4a11455ddedf9947e821ef098e4194f6cc46ba900c1202a","b3b6fd3f87905e1812547bf59009605afa62c4124a0a91cd029c06d177d44441"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2544092674 · entry 108e9186e8c5677a1b30…
Expected log hash: e3ca1014bd6a1a766a29da72cd2b9f7f9c6c416fe6af720fafa94eca555dc171 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787289954326","kind":"published-quote","locale":"en","page":"theme:xodo/communication/en","quote":"ZERO advertisements","rating":5,"review_date":"2026-06-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fc0474f2ab92…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.