Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They'll never get my business, strictly for that.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514383033

Proof data

Record hash (SHA-256)

ef585d0c544e71a66eb9347a7707d1d47bdd311868622265d7e0852be3d0735f

Signature (Ed25519, base64)

LmogOhQEDKevg9MYTTG3xHz8Y0TkPB7qdaTbDcUWUEn+NK2ez7QGQOc6zaB27CudvZRxdl4SizWh1FsLhoCkDw==

Merkle root

197f899fafda406e0c9d0591eaf3664c281655082dfd19c34045187b374127b6

Merkle path

["ef5c8e7fdb52e936d743b897e257be75a5b1786ffa1e2745c833c829129b0606","ab13a1f1b015bd329fc33f7dd9a163e263c7ad82cf36e4a2d623a568a9f30ca7","810a426b2afcfdd988e609789228370a63f98ffd39992062b3398d9b7b004d6d","f2b2a5cb6141af4006ba3729bd665db811da784775e143abf4537e04a5e0ff4f","d4b0de7b75df9559f56ff8419d6d94eb02f896f6710803902fb7d6a4bd3a6c7f","ad1c3f68d2e965c615d51de8ab9adf8ffe25a2ed8f9df3124244be6989897b02","616dc73f1c291ecde21e42875c5e3bdec9bf38ef067f99e7edbbfb4b7b145a0d","e400b0d135c10010139b55dece56038d75175a2a382d8708111657a86ee39af3","cc22abd0df3a9e1bcde8937c1cddfe3015431fdc0ef589d90d300216745b1b60","9b06ead4c871724ae132384ec7e17ef28f0084a4c068318aac4525141c7c1444","ece4c044a3db55868a8b2d264758ea8402adc9b198f3e8fa803301136418ea95","9c76d14f9ecad384be95e0fb9468ac610d3cf006a044c55960e95f654d5da9d0","9d8eb60d36f443bb134fadec774a73a1c6c1ee8363fabeb826b6d33b69331125"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514383033 · entry 108e9186e8c5677a6078…

Expected log hash

4e5cbdb3dc34f3dbd6a57b603e905df6c94968b41f5bd83d5c9a25f2ea060d8e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787127398505","kind":"published-quote","locale":"en","page":"brand:signnow","quote":"They'll never get my business, strictly for that.","rating":1,"review_date":"2026-08-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.signnow.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (197f899fafda…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.