Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the button for uploading your own files doesn't work”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2904877428

Proof data

Record hash (SHA-256)

ffaf96e4a5d21700bf8a21459f24f5867db0963005ef7199851d7a15f2226394

Signature (Ed25519, base64)

z9kDjQB5DGuL0CE+CQGXpiI+UKnXVlszkcC0Xd5RNyqhEMh+BtVP/txEIdBQL/lGeiU2g4qtfZllqoRyrr99Cw==

Merkle root

e299bf38720a5a91bdf63bbc0205245bccdf3432ab1652c69342549658b7a9ef

Merkle path

["ffb08a9aefa2c6acb85a29c0b2d1d9bdebb8942982dc3c57475350017c14ae61","b6b23d9224e3012748f75d7fd12787ecad7294a4450b611d44d7c1e9034841df","8e955ffcd3b8888afda8214bf47a5f4976be083f31920e2b4e1340c0b6711e6c","6d3b863eb30a3d1bc8b804c479efc7e1523852bc4cc96b83241287006ec4a261","9c4b4b5e94c126b5611caf842fc37998ccb14aa96db5280504c8583e25105691","f845efbff06bfd005d1e557e250b05d40a3ae4677f5c44c6dbec18fff5d95ea6","c207cb9bb822912116e03542532ab7c50cd441ba1abc30eac79c46049d7023b8","63f1ae08499c5441b943b9f9e9e6575a2e24d875224fb1d91a5d0566e9e4fbd7","dac811f23f39e685b833f1304f7da13355a4ec569398c7e551687e305c7a317e","53a8a23597d45564e495678bf6125e41ef42f347693c924494330dab53ea1e2d","2a462314156907e42d6f0d96eed96123f1d79516aef73ed189d9f5466556b638"]

Anchored

2026-09-21

Public log entry

search.sigstore.dev, log index 2904877428 · entry 108e9186e8c5677ab408…

Expected log hash

d020708737f55ccdf49203f373fcbcefe8158cc388605556fbfda3c365de7360 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789881486272","kind":"published-quote","locale":"en","page":"theme:vaia/ordering/en","quote":"the button for uploading your own files doesn't work","rating":1,"review_date":"2026-07-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.studysmarter","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e299bf38720a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.