Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Brilliant work guys”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3666871737

Proof data

Record hash (SHA-256)

1bd8efb76a98deb7613e1bb7810b55efc1c14cbbaff04a63d63fa80e0ccedfa0

Signature (Ed25519, base64)

zpYHYTMWdZvdGdlzTNHmR4ZifAc92axHCwdVXZzlx0kk1806+eEHP+ekPGcHLPPyPuFjWR7AJ+BzC1gPtyMTCg==

Merkle root

765f6792e648cc782d6d33d8a368e434d51bb0aecf5010ed674422d1b3abddcb

Merkle path

["1bd924fc19c29a7fbc64e6d100e7f658a1312986fc416d8cfb62b09e91f78922","7cd2a1a9f76d4e2814b7e9e9f259f7c42b7ec5b98f6423b2a7eca7bc9afbf558","7f619180839b78a7a8a47dab6c6a5573366bc91dc7d3b9f458d149b6527131f5","de91dddb313eb354b60620be001f174b83521b78db660f13f439d6ac64409b84","affeb7039d131bd83d8155947d84d42874df82eb6052df2b404e8e791130634e","d6ee3480adfd37b3e65a0a0e753fb958a5008923562f10f1702fc7efd2c6b35b","8413d2e42ddf3bc90457df26e4af8845c09be33705d90aabbd1db1fcfd2cca9d","046dd0cc6d29543eefecc69360585b489af8539e6e833ef473afdf75d10465cf","06a0e514941c50b0b4d4c395bc6f7fbdba818e4332ae029c70478397ab95e689","0abbfd323c3b836ef4075183abd867eda0fea162b7941c8f06cc3c421d8e9d81","572b46836ff556f8ce2d140b158240e2224652f198230639f0a51d1065baeafa","0b169951b1dd93e46d36ecb5066fde6632414f597d3b3684131ab046c3148b10","0fb11801a090bcf458239f4dbd48ace9e86d9dc80c3156e3c0d61ce00ebe0213"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3666871737 · entry 108e9186e8c5677ac8ae…

Expected log hash

47ce816b42eec209ce807a6ff7fc4ef84557e80f31f3336ccd5d6d00a8d2a9c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793702406981","kind":"published-quote","locale":"en","page":"brand:roboform","quote":"Brilliant work guys","rating":5,"review_date":"2026-08-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.siber.roboform","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (765f6792e648…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.