Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You can only upload more receipts.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1cab9deefaf1442c722baa8d387d477a86fa75abdfa46de4f1403c7f1f141fe6
Signature (Ed25519, base64)
hDeeL8vlP/mUwRHZgWIlr3h7rBFC2ZBg4XNgge7tYySW9QK2zl2+/fqntzKE1BlRuITbXv1HihSaMSd1oWq6CQ==
Merkle root
3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path
["1ca9bcf92fc548a161149501c0d6f77474720c9c6fc3c632f6c0d5b43e563d31","75d262805ae766528836fa30274777f8ef66db267e9414b88a2626598234f6fe","c698229151b25b1c390eb68a41da72d6359fd51e0a98651fd0f4f6c408410409","21d71ffeab684e6ab9e49f56e44d6c659105391a61b4d8015da4b8e14aad7be2","5a45c46de5b9c8b67272c401c874962192348caf79945bdfcc862729519d3adc","a00564269f4f5c6223aef02e7d493cd890d7e9a487b8108585d7e52be92d1669","556cab54034de246ec42d6ae013d1bfa7184b161de26e98ca8b894ea9b0b7a3c","35f7c49af25c97632380744942b4bb3b177e8003106d503658076a42de2ce4ef","e041c01b6d7c2ab0e1af60ea083be3b3f548e32d49c2a78c50f794594335a85f","1a5cb5bcfb855c4ca3fe0ef065ea008f02ec56520f77359a9d3d41a7fd52a6b8","6268945e9849cf805ff520997e56f16add0a9e2120c6eb4f4ded7c07d7bccb7d","7145a25bf2e4d5b12b2e2be0ac0e96a9eb61682d26d172b63f2d28df120614e5","499751eafaebbd34bd3075e397b2751a5b4f4ce58d0c2b3e5d8399f6706fd4dd","c3a6c334f1acc8c0b843c5d43c85ce54d647d519ab035a8287aee565097a2ae6","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash
d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787131980797","kind":"published-quote","locale":"en","page":"theme:sevdesk/quality/en","quote":"You can only upload more receipts.","rating":4,"review_date":"2026-07-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.