Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ideal for me as a small merchant”
Google Play · 5/5 · 2026-06-26

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3084008230

Proof data

Record hash (SHA-256): 0e0a6dc556323d2ed379a5bd1ecc302329b79a19890c8a48b59de37ab9d09e72
Signature (Ed25519, base64): cHLFhtdPAk8QAmAJELouVNTp0qcvCuNg7DO9B7191iSJwgHYMNjTEn+MryTtchE+3G4hQZfzqRKdFmr7P1KJAw==
Merkle root: c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path: ["0e0a489d38b012b12d22e319692f19390618e2767989e279dbb730a288b7e7e0","34368cff8a164df6b4e1aa952294603dbfd9de365ac28c19085dbab75579e738","e08751d63b22a47fd49eafdd186ba51018403752a15a755657b28f41b3a6ca18","0d07398b8eceb463382b9234a56bc48ccb872122a6934cad6010b8ccc8acf80f","86d0d854ce44dd7f6636f55cd4b8bdb9c696ead788546d49bf527ef5da41aae0","78ea18b4febee6e32b552a99cc0613bcc3509bbabe89292848b14c1e959ff4d7","096c596ed5d62ac2b198a922352d635620fa412247c71e22488b137b5077d2df","d5a0e292f9d3f098e893fff9eb27c896417441f8fafa05207913c731f9e19aef","db87e9cc8bc7d3def83345193a45b2b8fbcd0d52ee4a654bf3001da7d3978813","146303ba47d16fbfbf86ceb87efa4c1e1ef0c331239c3edcf3ff7015be51c4da","58a4e6fdfab4ff93af1cdc8a1c07fcd39711f9dbe9835a3b625a441237358dea","c7125ae20103191bb1f7fb84409a144584e4eda9b031cfaf345a6286230c5535","1d0fbbdf6a8b806d2f18b88d9ff84b283191f14c9ba960ee1b7e6a525125a681","47f7935efde5c1916b9700110a56050667a486da6d01efbf1be7671f42769e58","2d9d4b958999e2b40d6b124a0a8044720e0313c217d237832e6b1171798873d8"]
Anchored: 2026-10-05
Public log entry: search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash: 6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791183579482","kind":"published-quote","locale":"en","page":"theme:sevdesk/fit/en","quote":"Ideal for me as a small merchant","rating":5,"review_date":"2026-06-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.