Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Then I got the MS1002 error, like many others.”
Google Play · 3/5 · 2026-07-17

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2913636507

Proof data

Record hash (SHA-256): ff36013f152dfd39881e260ca7f3a9625642381690e92e38b23c70a36b8ccce1
Signature (Ed25519, base64): zoGJFn3X5r8fXibYmmvc3vDqFiCaziXNStbXcWSIYOV/yQ1bGSE8KteMXavyx+i5gGg69HLlL6r401vk9J0IAg==
Merkle root: f26292e960b34f73f9768b4afc64585e265549d794b35b8167826c2bcda92ef5
Merkle path: ["ff3b996bef423fca4e9e59cf852edc2f8129709908f941ce6130eddbd30d8432","bb994789cadc4e98ae5f9044f959b15c409766af8ad770ff19a692e314b0576c","3b4ea476a49769a198dc7c44d90918aa60426382fa9f8a13025dfd6352355c2d","b3cfe002e536b3d89eecac1c3d1a86958316d450ac4be3fb01396340c3324f79","f3e4abee982c1f62f5d1b24686d1dd85a2e48ee4459f24b6c1314c58f2a7bcef","f2f03b00b2033dc168d31ccb5c75f988c37a26858c37199062d7b65c4efa3b20","2d9af438260d4cd3ea6a9152c16109c7e4a397533e4feb690730b814fb0ec24d","6b5ad3cf0f3a945794fbca411813dfb9da2db5e98010209d444dc1add594b87a","1669d2669ca52a58982f0fe3a7cc194189b764555a3768bbdfd67f778f11a007","95aa4036311f60df951a1e68ed3b5b14046a54fa033b1a14fa34e99f92419ff4","00085cc83f5b1ebd23d3e94cfd5dfd530d487c8d3d3790ee5d04eca3b55eef30","b763ea1ef84637e764decc45acddfba68cbd65e2d958f57cfeabc8af53520b04","a616224c7837fee9e37cf9dfa53b6dc52945555438d928215ead84ba8ccc7b57"]
Anchored: 2026-09-23
Public log entry: search.sigstore.dev, log index 2913636507 · entry 108e9186e8c5677aea51…
Expected log hash: 417fac9b806377ff48d30ded01faf8424eb98406df713fe2564ee9077747e6a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1790070376053","kind":"published-quote","locale":"en","page":"theme:deezer/returns/en","quote":"Then I got the MS1002 error, like many others.","rating":3,"review_date":"2026-07-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=deezer.android.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f26292e960b3…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.