Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Makes it difficult to run my business and send invoices efficentley”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3273174405

Proof data

Record hash (SHA-256)

15fcdbf4e79ec501abbf6973c1d90279cac98d53ade061de9818819591d0a997

Signature (Ed25519, base64)

rDfSdcrjhQiYEk9y6e5FZDvzZm0TzJVDRjBS+xndiTdl2lmRRoloSmenq+DBlC+6rQgPvGJa31Cat7AWzoM0Dw==

Merkle root

a69839899d35e428e965dda22faa8c37ab9f1f9e8354c5c301a0cc1dd97ec994

Merkle path

["15fe81bdd71b69f270fe9511f16501fcaf848409a43fe26acc063d673f754347","3387db67bdcea345177fa5b5979e5514913d29aef729bac89cfbe588150310f5","1091ba30308b17e6b45851d973b7e8e584f1da04a61946431112476368121b11","629de2d7faf33318ef59fdebddc2b98d53a026f41c150d20cfbcfa6c8e52eff1","451baaf7d0ad65b209205099546accc6bfb284050def3eb059c076b646869240","154db0fb46ee7e6c0261e35aee767e4cbe443fdc9a806f7ad9713c7d2428ca75","85b481710cdff5e1c73c17957e66469d91790ed6c130ab34c76787c6d9c981e4","149f3935a2da29213e7ce01815f23d62dfd9a4b5ea84955b3257565f684d98b3","7d7661c32857e128b3b975afde074b4e0c7fc5e65776cd80bf8de82a64ee00c7","eb09030a39d5058a728eb14149ae061b7e2dd198cdff5d7a50a1319514353771","5db50f6c9ddd9142d17c719620599b5b6ab33d2695f643b31b18ef1d511e2391","48072dccf34406d20883cec701fce66bc2705f5d4c15636c2ca8b10cf03adeb2","c91b6bd41b0d77873850967d2a33b58afe5c9b2077c41a3bc5e3eb1e0269e91c","baf50621c43237ae6460207428b54bf7432b36069b72ded7c303da6c80c67c5e"]

Anchored

2026-10-16

Public log entry

search.sigstore.dev, log index 3273174405 · entry 108e9186e8c5677afa7d…

Expected log hash

a8603da072baf84665c1f8a43f623ad1abcc708773f195fc7b697ae45f09c136 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1792120797404","kind":"published-quote","locale":"en","page":"brand:quickbooks","quote":"Makes it difficult to run my business and send invoices efficentley","rating":1,"review_date":"2026-08-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.intuit.quickbooks","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a69839899d35…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.