Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“this is honestly the best and user-friendly that I found”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2789279696

Proof data

Record hash (SHA-256)

00c293a904c29bd4703a438ca68da1ef5a7dec0b65a259f1ae959615e17059e3

Signature (Ed25519, base64)

smTH8bEqn/zSQarfOZSSaB5jY72XX017TYyWty36I4z9zY3vWJ3jI49gf5e44Y3CO5fcm7FurPGjT8oc20uZDQ==

Merkle root

97eb1062a862b99998bef0a84476eb3c3812bb77c2cb927f4fd2933b59da9e3d

Merkle path

["00bd55922fa662141b1d6fc985a11a848b4d11fa4e1bbf263196d810554a36ab","5635f2ecaec8fe85ca6436dd54250f76d17182b4e0440035aa6c57c39f3000f2","f9cc2c62b512881da0c7464e92a6070bd40f9508a4bb6fe08a8800d0f1e791ad","878b7d4bb37d309c980c56c14e9c0302e98eba779e297671be1715a552f16f14","bce7e8b750c0095a9e1fe8add92bdf8f5e94d13a3e4b6f8fa697126b1f5feb8e","46debcc00c5593c57f2401e4504edef36a4aa44db4fe56d082a8c12110f5fd41","4a5f529566b28496bdeae68d52a51b64adf41305a25a22fc448710203905ceff","1cc16aad6c6d94e4a5cb5f1e3596142b2e04f3b4a4ec1e2aaea1d358eaeda023","5d9d600f3ded5efeb1a87066ae4743f9210bf4ebb08010d0a026b8bef89e4f0b","d107752bf8ae4d75701e518a4f05f0eb4b551e1f5cb567f319566cb1f61d0db3","5b9b96529384f7bb81bb92f10de9b43784ae20d39c933bbf96b1bb4c3548928e","6c14202f6f4d89338c781140a2504c6d469b19d300474270ba84f87831aa8464","5b47260d99d2c4ad6e0d963995c990c8506dbf10eb0b146a116c3fc6ba348071","a9559f2ca8536f2c18bf059f3f0099d62235a93ac35dc17b09967d392b72be7f","01242865574478f13dcf9d888236d7a907264abdb87f360db7db06de0945075a"]

Anchored

2026-09-11

Public log entry

search.sigstore.dev, log index 2789279696 · entry 108e9186e8c5677a3885…

Expected log hash

05c7009ecf7ce5cf315c252c2a1dd135e64989a02cacdaaa3c5a87412a2e921c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789017464005","kind":"published-quote","locale":"en","page":"product:wave/receipts/en","quote":"this is honestly the best and user-friendly that I found","rating":5,"review_date":"2026-07-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.waveapps.sales","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (97eb1062a862…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.