Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I needed this app in my life”
Google Play · 5/5 · 2026-09-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3123541116

Proof data

Record hash (SHA-256): e5e677b6d1a1e1656bc13ec580cc1a6f240c5064c7b57e198be714e5a43181b9
Signature (Ed25519, base64): ugFmuNQbTNOzmkrlnZV3+IaoZHpKAVQDf6PCYrb258it4m/eveZ2xMlRRxAEWa1wywRH0BgTiYn9b8t4Vsq6Cg==
Merkle root: 6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326
Merkle path: ["e5ec62b02f80502e23322b8dab548f0be2bd810b14847f0cdd7639d278667f4c","abce3a84799c61f5e3c696fd7e6216ee70e8af6a376c623c01f192eeeb10be83","3a823ebdf5658064f70426f5d3c09699b4b8c2db9a962d6d3d9f88d1ff0c3cf2","8f2de4ca926e29ca76306575cca150746002ab3b0aac020d1510562e5a70b3a8","fc824fe232583e3dfbdd8287da797f09b9239ba3f80034c99b5549ced19db93c","e833f45744cd6227f9c30e2971b859efba71a37e680918abffa4cfe2f799fcb0","47b0d44a162518c71284e58567d0b1a3be9ac4d21d875520d006024042bd4f5e","9c1290981be5d113c614c1f6e3fa2e8920c5e8cb2ba0299aaf56218320812ed7","42ad9cf153bd8b84f73251e2784c3f9f18ac152173c9e602e69c2ef59f4e099b","4b2d19b677e5ba70ea72d43038c326eb2eb5c0c55409bc8f6e9b512f259defa7","77bfc47eb09c0655838c08e7b2d342c3362b47ec2bd38eb4fec428bf0e8ffdd2","be5152aa2b70a30f8229132b9cde15055a4d38f2b730649ee593e26419b70ca7","d8de46210a94a73b884c43bece3f6a460d5f9b49e90846c8cdf8f59698992615","7ff9f051c672c7e991c64fcaeaf64917ba150a113f84eaffeffa2b1ead70d08d","66354141d0b2192964d68d3ed5a28821ebb0ec5cdac40dddc38334df042df089"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…
Expected log hash: 9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791346951310","kind":"published-quote","locale":"en","page":"brand:everand","quote":"I needed this app in my life","rating":5,"review_date":"2026-09-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.