Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have just started.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
083ff1888747936a932322e2b117e07ded574e1693c361dfec7e2c9bb639c233
Signature (Ed25519, base64)
j0LetjWRZoh0h3RNtTYko2UH91dhl/J+Mc1dGXDlNSUt3rKGguEWsBRIU0uiHjCIzdOxHk/2kIIoNaBL7LTICA==
Merkle root
689da4f5bb049dceb797a1ebd18ec1f343afdc6a2eec17587eed167cc7c21a02
Merkle path
["08404b1c82e4d61cd281402086b9ed856046e791413c9858b44442968b29c899","4c7b04f4e4f64eefc1e51cce29e9ddd32cb44a7774a4eb29cd0bbd6ee644b37e","1676e04201572737c5c711a8752b2f9e4e76d9555966859e9a9c739aac97fbed","4d3de4d8ad9347a3c9d5b7b9bda8405f94fb815df04514c11ed43a1c225b5f40","1f689e02f677843643c59f1a19324b7b87336e8757bdddb73a363469a6fcb5df","9325b2081945c3d50d105268d95b4771f4147f4881c06ac4ba3add1eaf84ecec","f7fd97f6f02d0db8620ee8786d88bad5f63541d76fd2651b1cf0a37c2766f7a3","3839e2c9388411d27b43445fe1677fe2562bda1671195e29de13ba6dbc913537","672d8e82dfb75660d58fa11012b27de7bad60df2c73512b03d393572c3a7a939","4c9e74160a22446192235b14f78b389e78b8e9b2c5440ac70b64e9ba051120ef","e946fc7f79f8ecf4bf4dce719b8880c585cb43864fbdf848e2ac65dbed6253ae","76299de842eb0e0f889b88da6c0bd5b62c2da544fc8fd32539ea8b904c9939e8","b29f01d1d4fd5e719afb8d2cac2b7867993dc07c08772adb1bbe832e05e6603a","b93077b5d0d90464bafb01f0d5e12407aea90af234685d3284ce5c610fc51b1e","2492d624e607c70378839deb70fe4bc4c618faa9a11f2be7d0e42b467b07d755"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525430207 · entry 108e9186e8c5677abb21…
Expected log hash
68e6afcd6c232c11ffffa818a4cc0c5faf1a86dd24e2ab2a7811fa1f4f43bec8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787196781193","kind":"published-quote","locale":"en","page":"theme:sevdesk/ordering/en","quote":"I have just started.","rating":5,"review_date":"2026-05-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (689da4f5bb04…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.