Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Stopped working after the update.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
125df35d4c4806ab145fee0b3571cac3017f935e3478f72d304ef83679640200
Signature (Ed25519, base64)
4w/oVsScDBSDVU1P/+xbPzfWYPwSJ0O71vpE3qJ4Y+daQfVyhuEbMltB7ujIkB1O/O/UpmrwM70s+SavCG3HCg==
Merkle root
761f428c7f44b8ba37e197f3cbb402245009b42c2fe1c2d1c22502b7539d8b92
Merkle path
["125db38327770e461d0fd78d0ad59252bb1baaf04d9376335af72bd725eb2f35","8cbde3fd90dd90327dab44300eeed1fe24b89de30ca1d17b54d26553dbbd414d","aa2c5ecafc2eeae72d00e59a18a461a22283190a192ae075424ee66edc7ab49b","874d02351dd551b866dc1dd676e754a78bc23b2e62c1bfe44f04422cd9e37874","429ddae53c5874bd0ec465acd340c52b4fd65c34269b14934b4b4d45fefe2e81","a6b339076e6d716343717250a565dd72ccd2218dd17b24b7dee2b1c0ecda9b65","467ea72c4118542b0bcf6fae40a14cae14691c182ee18c93261726bb7a9ff430","8e7f0c8380542a0160a290191f87dbb5fe8a01d81c193e5c54468dce31eff8f3","9821d509168daddd1e286a8adf04083371221d3ae15686e879e5ace974d9edbe","733a9cd3438e9ec3d5653b5752a03c3683dfc1354ba3612f685d4921e9de8025","825da8037331e42db8a9cca808cec4078a1fe289c754d6812541d1e8c14757cf","ac2f3954890d50e5b934e4f938dfe72f0ed89b30b6b5e9ab8d03e21aee2ed045","25ba2ac2abca74d5248bc368aaf9983fea985a62c2acc2567cbdbe71d6bd7cc0","d7d046f6bf143929536e498046e2783984565776df0c4d84bbeb719debcca31d","98f4686310343eccfc39a6e64e03e6f8dfbadf7603f7baffd9efd8b7d19d425d"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632992954 · entry 108e9186e8c5677aa5ca…
Expected log hash
96c11d64daec1fd5d2cb12bf1cc37249a60cb62f00cae505cf36fc8b47d6ac25 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787977614417","kind":"published-quote","locale":"en","page":"brand:bexio","quote":"Stopped working after the update.","rating":3,"review_date":"2026-02-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.bexio.bxBexio","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (761f428c7f44…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.