Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Was für eine App, lol.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1d56853687c536837142200fcc3e0234888ae843b8e086438cc4bfeb1106eec9
Signature (Ed25519, base64)
9braqFxG5u3Fmg5Z7FZbmO3FyU99HQ7Lkc+/8ACPWfwtGDeYzEUxxNQ+gjkSgp65bC/nXwiypMmPuDVDVidqCQ==
Merkle root
9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path
["1d5d2dddb5a5949b2455593e3dd86b6d19c7772b39b5b74504d60640dbffedba","403ef009598c562618315ca24054d1d5937a2fd7aa036f13988597b35ffface7","2c2e0d82fcd63c13727607db78f9a1b8ccdd97c4d9a449fec913a9b3160e74fa","fd6ed7ecc09fc14705be7aab73686c44552b6f20532289644cae00efb64c62c9","eff257deea8027dd17859e4c5c8e83f681d60618f2f9a7d0671de047fb1ad69b","53e1464acfb7c29e9e0193a4d6e814cae7fe31b105c4bd48072c8a16c5a4ec0d","a0c098b4372110b4ed11afc1519f50c25f175a3575c0f9eba33920bb23de467e","c92a88d22ef5c48925d181e597509d4921fd3179151fccd804c8f9864a752280","5881df7750415635667b2597a362b6ba5e22f49f5dab8ed34d7835976f6f731b","4dc1ab617666ddffb4747a40cc7e72ab36e186c21dc2180b5888feb26b00eac7","31ea8b16f16ac514eb9dce0a378038c2ec8b306248a6134940c93b42416c8060","2d979274d680ea02cf70c9d6188063cc19e622cbede790249a7762852386b868","1b6827f0620411d457632601225bf0c0fa08a550569ab3a9309e36b42067eb0d","97b419a98acf461915694d49df1436895896a22d4e853073303f64e609656c20","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash
a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791340487550","kind":"published-quote","locale":"de","page":"theme:canva/ordering/de","quote":"Was für eine App, lol.","rating":1,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.