Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I am writing here to get a response and ideally a refund, given the significant amount.”
Google Play · 1/5 · 2026-03-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3121353835

Proof data

Record hash (SHA-256): fe992745cca7f8a98877d2a30e57a9fb341a33b56f19213e81cf2eb47fff3b36
Signature (Ed25519, base64): PR7HsLDa/fgi87wvesfuJEuBwzajl5JJpLG72Om6r91EX8Rw4CH7vuFrqbvujSmhlj0XK76uQACtsNIDVdpkCA==
Merkle root: 1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path: ["fe99e15848538505d5e69ead63f5bb566dec899176d1a9cad782cb50515c63df","ec897bd6c01911697b32e2f5bf1d28c984bf70332adae4af206a9d8a1863ad76","2065422212f822668893b41b106d7419bb421a5c6c789857cc084d5e6dd9160b","932f1f4378c207059956319337f1b16bdc89e2a5535837f191121cd1b114ca98","f5d8d06ead86bd33fe0a1e476a67a60b202ffa714a9e75f9343e4d3e44eef001","eb20f53c8596df367f39038b199c75246342398f02885adb1e185a9a69a0a5c4","71dc54658c1a70218a057e8b0c348a689c42b1f51818c8aeadd40229d4759915","72202c196f85fb289bf0339bed409345c3d79156e78c67b9b0dc1b3f05588554","30a22f42e394b0ce2029d28467124f937da7c6288cbefbb95ebe1e4f060cc4b9","654434bc0759a25e3e0485980743a80254ea23a936bdba95c55fbc85f48313e2","c31aa9f4134390b3e2dc66565d83aee421577b488a71d0f980c0c4b3abe171e9","b0c646a12cf4bfce2b9f004a1db0b491dd07baa76d3d6f2f739b7044b42f8eb8","814e31f10d1e59dae138f8e35098136c11b33d0ecdbdf6bee257a77429b73184","0f1ba71c060deedc77d8566f04d4f91c80878775c47405bff7bedef8fadff3b3"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash: 3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"brand:schulthess","quote":"I am writing here to get a response and ideally a refund, given the significant amount.","rating":1,"review_date":"2026-03-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.schulthess.mobile.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.