Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They won't let me cancel my subscription”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2907673729

Proof data

Record hash (SHA-256)

d2ffef26ea0dd230be0546eb1f9d84e627ddfb31b16880f70dc471e938aa4224

Signature (Ed25519, base64)

mQPiRRZ1amLpmH2rksbqE6uRE3p/qfaHzBkYh7tc8H3dVWS0Um1XDWCvNgXej89Yu2uZ7Qz2eRKnUbiNH84ACA==

Merkle root

b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02

Merkle path

["d3044cf276c3a2f7041fb7b557e3f82ee5155f9cb333a41eecad75bbe13dcb2c","4243004ecaddc01b8c594a5b6a2ff070c82aa3f651fddb38620610b2a3442097","5cffd7172eb649195f147cb7a74d999c83098ce96dcd2521003d7e64529fc26c","750a0debcd895dddd9e048edbf2d1088da16079c9aa257910f4a82c61bb3ae8d","6c1da97a5b6e78c297361e3f5f43b9a9552817887ec1f8ee5ba610a39c007cb4","2298a59701a80d761454ee2492021fd78a2d8ec3dcda8fb8a1a4c48acde6f3b1","8aaef214317a31eb425027b3ce3e4aa83a9cfa9f7aad8138605946944074752d","df35b7e24708696ead3533889ddbe38c49cb0077bff964d0a9d7549e7cbf9083","a8252b2db3066b4a1478be5a406e31ff1829812687a3e2675230f43b7502bf6a","993ba8af9345b68edda1f6bbcf44d39a7a29f45add55401177b78cfea94d4408","5fa4d2509ac4b266680172a1d644b9603830e2992eb99b956b8d4389a86690d7","1324e7f8581b1cc3455b81e88efce3958a5b23eb7205ddfacaf930e32b10bd47","ff0ce3b59f4b6fff6b806e01d20d764fb2b7a5651693c19ab4bf8a8b5ce5f968","05978e8b9ad5fd39833c65b8b951e8c80cf426334c441fa8a8bff8eb8eeaf534","4543e8b9ac7bd077d9526acfdae449f0a0d5517cbb42414f50ef930ecdb9470b"]

Anchored

2026-09-22

Public log entry

search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…

Expected log hash

bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789969984102","kind":"published-quote","locale":"en","page":"theme:vaia/returns/en","quote":"They won't let me cancel my subscription","rating":1,"review_date":"2025-12-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.