Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I clicked a setting to change a language”
Google Play · 1/5 · 2025-03-17

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515144749

Proof data

Record hash (SHA-256): dfd5dff57bfc88f77ad42e4332a81be53d8694fdc4604a994dbdaa40fe8aeb8a
Signature (Ed25519, base64): LFdrzJNO5Spfy5+UrGx7ebg8/I0VVIOJlP4fgBh/LbpGuMoOW2VrvvgGXIxCVeTU8g7cElxaSxQLTuEYARH/DQ==
Merkle root: 8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715
Merkle path: ["dfd1829b41bb5028a0de2ab095fe0978d9ab83118224eac4778740283d88601a","5140eae7964944e100e8c1ba5bca227b480ad188d49cc951b9f89696a4bb3890","6d3182b8efaf4771c0eb6e85cab8a65981f451e78f8a55008313b9fede6bb660","5e5fb8dad4e1321da5aa3f4aede2e6ec13b056c8759f6e95242cefbe5e35362f","0955fbc640c7224034078818b56eed48142da1f5fcee5fe5cbc6da2c947f56b0","bc10a2271920ce1839825caa9e553de22d39f22657af0326af2350c7b55def8a","ce8565bfafef435bac12209b4216fae60e1ebb80bad993e10502a716e15de83f","d482f6ffbc7545b68d8b973584df9d59ca9032ea7eea66c9aed4f7c7782f45c7","eade09940f232ebe04a362bc7cb0c7bd95923623ed3762eb466cf46974b7cc68","a51eb7c37736748b090836019704e8381d5bc3c603d7d234e667c6345fab7b39","38bd3ac3a8c68ce69f935bc0bbdece8742e6ce6b30b8cef92eeb581f189622fd","11543b18f69094880258bc4ef2005bb992b20ca56511af24ea41f89fe1e58e53","86ecf9405e70cda4b965af2cb0338f06a3a6959b04914c1f62f998ca30a5b84d","aca625c2c743c13b7e188c90a8dcb2895afae601815729b8511e9bcc31ba8968"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…
Expected log hash: b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787137589246","kind":"published-quote","locale":"en","page":"brand:skoobe","quote":"I clicked a setting to change a language","rating":1,"review_date":"2025-03-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=net.skoobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.