Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The application is excellent for reading”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d7a6aa72910c2b733161045d63de1b8ce0f6164f08890b1767a547c00cf01591
Signature (Ed25519, base64)
WR7uSW41tdS2QB2h9XeccQx/f5XiekMvvLPME9jAJdSty4dTyC742P+QCI0Y+G6a5SVeLGUHu6ILR89jQfY2BA==
Merkle root
49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path
["d7abf5c64c026e635a86516a551ed5de3250fabc0636db5ab70f4e517699da1e","dd68d188350a763bb74e29a690d46e59869aa0538ebbb9e6ed82d2c5c78ab4a8","10e5ef74f9c6254879838205016d2be840e7af747754d5a24fe72195c0959664","86d62216163b337bb02b75e3c0fa794bc4b18d28bb3fa10461baaf8ed6d5a1c4","a91713fb35954b8b49438660d6872d3a8b3e5cc5c7fcafa55788a536e2f37355","9a8f0249678c6574ce4e06660190d0607b95cd9e65ea3578d5a461e972743d78","44ac311bebc215960c0cefd79b0727cae93bee68b52d77b868c5d946bea28511","32cc692b7abc6fa240346e315d74ad6b3125c23805d8c69f434ff093004ba258","5e5917d13a4fac47cd8fa18e305fd576db748c75f2588fbadd58eeda711b112d","58f60d60a55188529812863c6bfd4cd8853f406c749afaf1c4219ca5e33ae196","f6c18210c671c9c4e4db47247469f39978c0d6669a942cb1ef0f909cd9621433","7924bec904b85c9f773d214a0a251d8b0a1110aa9f6113d6f6558b4ac58ea7e7","573e30281798543ac2707059ca3c966f21958c0a972fe6cdc3a54117b3829e49","1fef2eea1ba7233240a645d2d99dcdcc4e3841bf30f06929c9f12592e46a0c14"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash
d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791428432986","kind":"published-quote","locale":"en","page":"brand:everand","quote":"The application is excellent for reading","rating":4,"review_date":"2026-09-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.