Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A timeline update would be appreciated.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
136caaafaa5343283612852b806afc3d65f94ae5571303999ba7a7ba81e55fd9
Signature (Ed25519, base64)
glk5eM49Lgx9gcRaBZ4VPjzl/yGuVzGAZL3WpYZv2G0LzT7B/qGIujNlCy9QvAt3mnncgvU5x65a/r7XmoabAA==
Merkle root
bf06d03d174707f535c1833af2fe5d51e1d258f061223559344b34f56a1fe592
Merkle path
["1371a37ba36db187f1fcfa2a10766e96579a1e08b8f08f07144ec17dd035c1ee","deed47a0cc9d91ae457fc90e2cece2b04a436352758a3e6c298edc671f7ee572","c2b5ee1512ead3f354ffe97f382c80384851beeb2e7e75d9abfd8d061bb0e93d","871cf3741ad587b4e57d2f3435594fee0347681a54a83e0e23f44f1e846eea18","6fbc81d49c998a489c43d2fe17656093910ac3030ff1b02253fd307293b001d9","0651eb1aaebb9357e3f75dfda833b5fbea6c79d73639f87db3f1a22c494393c7","668cc93747b43eb3c0fecfeb4200a1108c4d4c04589b8ce0cb6932a85809971c","c7bb87d8c47be5849992e195a3d78879485b4c9282e50b8fa26ca0f9e3f9c154","fccdaa348dc8c6d253e449d4c4c6fc822765274df7da714cdfaaba5ff74ace65","d98eefbbede89bf84443b7e0b68c6351f2f22c7ca1d5ae2c101c40977dc4ef36","a6be24d1403f59d3416f2fc0d8d9a559de4fdc3f208deefb5c9192d1216b1fc6","879b1c993b0c0814b2a75d570e70b17b8c28d50568785d86a369c01aef9cc8a9","3492fa2427a95ac81a05d55f826772e439a4f5dbe5c25418023e367993106e04","e61e8c9172ebccf404204c12ed180f9c4b13c940a974e219cf0d945d751fc601","7e649292aa5430485d2f826d445d528f8e95727e1e2103ce6cc862417c028321"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684346356 · entry 108e9186e8c5677a5932…
Expected log hash
21bf9008ed6eb4689ee11c1c7859f0e94084281b2b2e2088b1d7635165466b55 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788337894213","kind":"published-quote","locale":"en","page":"theme:sevdesk/communication/en","quote":"A timeline update would be appreciated.","rating":1,"review_date":"2025-09-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bf06d03d1747…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.