Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Terrible registration process”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2459591146

Proof data

Record hash (SHA-256)

0bfc42824277b59b74b8833a1f8b719ab03d9d8d31e2397291670c6738dd135d

Signature (Ed25519, base64)

wPQcH9sm35KPrBt7lcsch6V5OAifT/mHYBj0Tz6Z5Tlxb0Q4BURPVZ6NaEKlM0TprUPfv7Q3oEJlS2eJuvTqCg==

Merkle root

9382c1a596eefa9080976eb096c7ed03e3fe40171de1af5069e398372fbaee91

Merkle path

["0bf5e2b954756efdaa37227f38ea58d39b77e206599ce44cfd311e14272285cc","f6439724e12d7f93634573aeb1ba2bd9d1cd8969d81ac3bb967c653022eec0fa","7236a6ff1a1169c7b4620fde48476017031ead6f6963bff744886ff073a8ef4a","234a0499374981944e210ca5880667dd4af499729c84747c9b28e8c9ef50a5be","ca7a6f1561f478695fc8c48876ec72b3df2ca782cce4a7f715426e0ec1caea92","04d017b1191ee5e70b4d128d0fe0e8e0ea440ebfecd11ab519df431bd8645897","859a8ec2cd9c3fad900bca81a4b47271588cb56641bb84543e91a8708b6237aa","bce626f3d05e164c7540b7b25816bc747fd07e712939a54ab632988a8c8045c6","fc1e687c5257f869fec948a35fd5d3c5961b66c42d1c0bcd6f9bdf44132d500f","acaab235debbe7fefe89ef593aa9eaa915bf1ef1dbbbc0ae5e16d9190a360e0c","f70f3530cf9a799b6c3d182f6592508c9908db6de0592fb1ca3c33213bcde2b8","0a07710233488e1fe8d12ec235b26dc0410861fa09aecc26cfa3ae1dcc2c0d25","2db853ba4d74f44e7ad8b84720eb1d88f96579e198edf95d3962426d6520c5ea","f74e15aa83c33952f4e6c535b62250bc4daaa372e773c33036d3c89566985355"]

Anchored

2026-08-14

Public log entry

search.sigstore.dev, log index 2459591146 · entry 108e9186e8c5677afe3c…

Expected log hash

33cb528ea0ab769452be5b094c6325f654c10573b40ca2781cfa86fd95fbf7a5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786655683008","kind":"published-quote","locale":"en","page":"brand:findependent","quote":"Terrible registration process","rating":1,"review_date":"2025-01-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9382c1a596ee…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.