Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“After a good two years, my tax advisor told me I should switch to BMD instead.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2579318932

Proof data

Record hash (SHA-256)

1a1ce968ae1400918a845cfe5abd12a64d3c09054f4b3502ade8a5081746a2dd

Signature (Ed25519, base64)

SB0GkLcFrd6TXut3Fxj7KVBNu5Ttc9JWJ7r/9P7qLmwxfbZIcfC8fQBg+dTZCgzBGDoA+jh3Ly2WTlDxc770CA==

Merkle root

7b64262ccb6992b4b1db9e70024ed7bf00a279068dc28cec38a2b0e5ad6c1f05

Merkle path

["1a1d25295a03797631459991be0757f30705d96579aab732ac8d1eefd00b5e20","b695b16a61bd9567e2e25b14f8ee1ab5484289eabdc2f290b6b3b4ad77f5c61a","8436659cbfe1603e16110cf20fccb5b9af4d67431ec7ab1cd443a91781d0ce28","0ef6274f72f7c0e5dfd53f14c9b018fd5f68bc95e40f340d09ebc8424d726538","d5ff1eddb07da9929c5b5796320e70c3da8c0169b58804dd842521da3af8bb66","0d0362f622c212e4ae20415934608e69770a2e52b0c5c40afaeccb1fde6e4528","ed03f5f076319808974e1c0361a8e3924a3cb52c20fee6ce81a6f87f2a456584","a61ce571228eedb96e386a3181617fb63a20ea6664c802b27ba45c90fb1354a5","1b36d3dbaf661f6a461a23f23d659c8481d6aa01a8da49592485662647a138d6","9378dbe68637bc506ccb8c84ea0bf2138a16dab62fcf52e28ad07fc49fbb7246","9f59171942c72932628fd1c4b69df85b695b2ad7e8f94b5ad610783d2859ecc7","cf37991845f62dc778fec8cbd2b6c705b41fd00499591f35ad5344965bb954d6","df04ec2f9a279e16bd1cc7da71d9e700ebfbf4bc60d39678c8af20f9e3783085","320bc2a1db4514fccd8cf8663fb8c3ce3d8b8f889769795ae761d0eb0ef5b761","6b57fd4f8c09475077477ccea0d971c3d4573af62c3a98d844ca044662800d45"]

Anchored

2026-08-24

Public log entry

search.sigstore.dev, log index 2579318932 · entry 108e9186e8c5677af677…

Expected log hash

32fe6d62a45bd1680e87bec92e1d4c4241f512243c06642638c7afa2cdade2a2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787537478837","kind":"published-quote","locale":"en","page":"theme:sevdesk/returns/en","quote":"After a good two years, my tax advisor told me I should switch to BMD instead.","rating":1,"review_date":"2026-03-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7b64262ccb69…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.