Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“terrible force you to buy”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d11f66d9ddc3da6ba436b238c3b614c75c107bdbdfc6a0cada53593044740b95
Signature (Ed25519, base64)
m1acpcVBCIMsd02kF56RPuGZV6U8QvM7qm3eHgNr89WQL6VwerTOq59BtdvnD1N1fWjd66lRjU9Q+HDWMhp2AQ==
Merkle root
80de158564b7616572ca0c0059561f6ec90cd5bce49a388e61df989f3f6f2a86
Merkle path
["d1198c12c30a75bb23a630eab41074376e5b044924f10bf039065c2f8300fdd3","049334d4bd960ecea5ec1ea2a964f730381dbb444aa773b4b31deaf00d16a57f","e9b8320345bb93ac1aad59422f76df02eb76e4381fa13f9ffaa81f77f2b85eaa","aaa785fe0eaef970bcc7086b75bdc4c25f9ecb3a927496b6fb59986b5c16ec26","49134e85c1c9de63c868ca7281473d44cc0be7332f327247d51381024bce3574","ef85bae56c88a350a1ee234025a1b1a855106f9140378a0c791c2032867aa41d","81c66309f31eb6af26ac82d97ce5dfdcc4439ded116f90366579eec601289b0a","6fd5039aeff7f91c107d00f74355065dd93a03c2237d559fb0805f2f2e00f8f7","e073f5709f7d4c692117c0601b6fd8306ea6d347ae037d0843d6f93fe6192903","09103e3fc7d3b4f690d7d14415a90ce1b3e82b5cdd26c9929610486313569852","d6af4800ec87b23e0831e0937e7ab1f59509199c4c250651b488696a7016f44c","9e6991809ca9046896ee9ac457f984e96265cb36ff929434ed9a7c324a9f20ef","8fe0553797c008abdad7a62286948d311c26c98070c8bf61ca3dd6129d21db82","a005037a25946b6652855fc44de7f4032ae34c31430074646af4b1ad906e77ec"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2513802575 · entry 108e9186e8c5677a9216…
Expected log hash
5899b5d0ea18fa3c879147333708054c2e3cd77662f2b6f633aa3b5d5512bbe5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787121142818","kind":"published-quote","locale":"de","page":"product:xodo/convert-pdf/de","quote":"terrible force you to buy","rating":1,"review_date":"2026-08-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xodo.pdf.reader","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80de158564b7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.