Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“they suddenly reactivated premium access without my consent and refused the refund”
Google Play · 1/5 · 2026-01-09

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3123908662

Proof data

Record hash (SHA-256): d16e110cdd650203ca36b0cb569bbca021cd207ea96c7f2aa54a9326d73dfbb5
Signature (Ed25519, base64): I6nmoIiKYjeF/jIX+ElN9ANHw8sgBDPCAo0L7pgzl0Qq/VRoDPqyg+FAnR7qAQPMki0t+R4wHwBC64ZyBkQ2AA==
Merkle root: c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path: ["d16db3fd9b11e5cfa3e28801bcb9d0ea27d603fb396b9b2595266de9abb1580d","1bafade09bc96521e63228d610397b52fe8d9da352ce4cf636020e60ac501a6c","ee391f5c929cc6afe3439297d0f525a3a396eef9664c8737ef9b7f0f47d055c9","e0c123f880657549b9df948beae195abefdaa350402edffd97c07b77c5fac515","f74401426e45797c1d576828380d6b1fa62046a573e4868af4767987bcc1785f","fde7ae5fb13f16d50b3e90f0a3ba6ca118fbda80185b93b8f6e1d019f0520fff","0f7d2bd0307d2197b8d2de05d40adc4d12170c1961701ec8570296c8d26830c8","5566cd8291c479eb323323d5fab0ed68e3c80d5c0745edbec2a1b0ec54292efc","bdff0329c215fae493dd93681d5687cdf8d6037d1fb3ebf8f087ba32290f7f5e","ed069e4325d022617e26e0642eba679145550655198f3aeee31c29e096f9a6cd","3f84607d0f7d3f7cdcd75798910f05566479b6630b6c10b5b1e7d9ac8ca32660","6bf5a48af1d78cbf35b873294f418a912d98d15029ed19f9a94a6680f1555dd6","784409ddab3be140dec350f237cb0e0185a25a3b72a80e8c9a65633caab6188e","7edfc85f9440fe7fef8e7edd6f1372271982f006f84b94693306aed78930ab32","ea816c3f8ecd74fdcdc9c068bf36a30dea5aa6d104e982532f9e8769ceaf3fff"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash: 5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791348381030","kind":"published-quote","locale":"de","page":"theme:vaia/billing/de","quote":"they suddenly reactivated premium access without my consent and refused the refund","rating":1,"review_date":"2026-01-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.