Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“This works perfectly with my new GW-BX5600.”
Google Play · 5/5 · 2026-08-04

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3121837738

Proof data

Record hash (SHA-256): 1382422c02fd3fe771ade4039a66613b7367479cca7eed33809b6220495a74c3
Signature (Ed25519, base64): +IbFgF4xXTFUXMGB+DC3CYt97YIG2pphtqasZ228wo4n6I9WhCUZZOy6Mrhg2HW/V4fI6r4n8bdmQHQ2epaPCw==
Merkle root: 9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path: ["1382a21830e4c95e4216113b4024cdeee1e1822d4cb17023bb536c50c230e898","a74195f651477a8aebb367c51ab6ae3bd56ae890d72e8cdd68357dd3b628b47f","f0eb0a4e3d44cf536799a4258e6a5aeeca3bed3ae6fbdb9fbc3f53654c75e477","cfc110dbcaf0bfc3c53bbca824d8722fddb1e163928e4a34daea8d8d409c5e11","2d43ed6ebbfc5175aa0958ce4d7bfb9f5eedda74c92f3bd4a6d899345de766a5","7db1bb53a429dc601332d8dd741977f1bd68f2802e51dfca292ac81089dca331","c86fcaef8f07baf753bf970f8c5b3c296794af2f90cbc851567312ad3e9b5c0a","20c5ce373f319770fed852823215aef1a6e34377c29d84eaf40c49e7781e083e","f8e8186354ae9503aea4a32c77b0c0580cf6c362b0925198d424e115a7e7eaac","977c41b8e60d8e87ed3d6779385be571a0b739dfc0047ad9da939c95cd4e21f7","b59947a31240d511dccb39c19501fd673f414ebd3ed855d312a0b33ed28dbe0c","2d979274d680ea02cf70c9d6188063cc19e622cbede790249a7762852386b868","1b6827f0620411d457632601225bf0c0fa08a550569ab3a9309e36b42067eb0d","97b419a98acf461915694d49df1436895896a22d4e853073303f64e609656c20","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash: a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"theme:casio/quality/en","quote":"This works perfectly with my new GW-BX5600.","rating":5,"review_date":"2026-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.casio.wac_app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.