Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“When they ran out, I found out they took the money I had for their premium plan without my consent.”
Google Play · 2/5 · 2026-01-07

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2904877428

Proof data

Record hash (SHA-256): cb3bbeaf28f8f4f935036abe31be67aed8294ee76b06bdf991fe3d4f242a4f71
Signature (Ed25519, base64): 2vCjB80QOS/vkjVy3AZ36hQv2nWnP/P9PN6EhvQIfFKyemlKHNxaJEbHH42/jEpFNvDnCr5lcdhiP1GqmQuTCg==
Merkle root: e299bf38720a5a91bdf63bbc0205245bccdf3432ab1652c69342549658b7a9ef
Merkle path: ["cb3c1def1a2e7ab4f1c94d02f7997fa072cdeebf0bf693c8dfda5b00d8b7e8ea","8dfba2a87412b8b6f68f7019d1394d6b7a245c00751f6e5234e4511a2916c49c","241161ab1fab93820790f431e3ec318269bda6c3de80236d25ad81821779bbb6","d5006e5a8f9d04ec2980a8303564f4144cc085969a567df99b310b7b8b53ec7d","7a85eea394ec37a2c150444a2f7e1e8ff859d91d39226c27a08677795d446d49","c238dfe6702c905f2a2cadd9141dd3bb165470b6b8ed89649c203e4033ad3136","023bc5461df06120e5a77c3ea9c19d0f8aa7db60cafe38bdaf2e1464868cce7c","a470b30dd42ba45d49f1160e873fe3ebf9158e6256e3625d3b8aaeffcab609a8","87fb8ba7816697919a0144c4a25e8e3458668daced16283da7814ebfa6a80a9e","d624bcc827d317825464f2b349a46266f6940373fe2bc1f629939a8c24d75dd8","f88be881ea062cb0d1c908f07c2bc25877d657079958d9ee97dfeb71a5747da7","bf08a7b70abd12d7b26586897b736d1c0404f066aa427e277708a875f0cb6bcb","06f94171d32c86f72a9e1d984f2a7c3fa7bd9f00a98eabaa3fbd7d57db71aaf2","e3714293de39ce3c6e3cb9d5ea7711343b19d2be532c75504682d8ef52e8f91e","2a462314156907e42d6f0d96eed96123f1d79516aef73ed189d9f5466556b638"]
Anchored: 2026-09-21
Public log entry: search.sigstore.dev, log index 2904877428 · entry 108e9186e8c5677ab408…
Expected log hash: d020708737f55ccdf49203f373fcbcefe8158cc388605556fbfda3c365de7360 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1789881486272","kind":"published-quote","locale":"en","page":"theme:vaia/billing/en","quote":"When they ran out, I found out they took the money I had for their premium plan without my consent.","rating":2,"review_date":"2026-01-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e299bf38720a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.