Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The rest is easy to understand”
Google Play · 5/5 · 2026-05-10

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2524422814

Proof data

Record hash (SHA-256): 1ee20579743d067942ef5d5848dbf3a0446b7e65af97fb906fcc380cc863473e
Signature (Ed25519, base64): 0/e5wZWpdw8zJP/tK0yOYNmG1qA7y+H++unVNR3O0/2HX42itmhUwSfl26VexnWb3HPQ4sV1oWRT2NQbjjfoCQ==
Merkle root: f8b4f722de05d6805a889681c3818dbde0f5141f0c8463f2762c4a9a02d66a2e
Merkle path: ["1ede1e902a61e41ad85f359c155b5a79bdf32a530de38d571bf58b8ca39c4092","d76b06a2c453e5f0dd6f36fba4621cc9fcebed625271aeef213475610eb73c6f","e672995f3e46402643fa22110398953277f8dc4f65acd5223fbdd6a83c7bb664","50cefbff64d503dd7427cfff3fb4b2d9b2fae3a4504b1f808c18a71e587462ee","e91ddfbd016324dd3878620e70374a54d697b595ef3188b61e94b640c70a0274","4f93e7a3e197b41c738448fea1ddac122134e1e9456d00281f2304200c0d00de","370b6c28f57048814b557e0d20de13241844bcb59ae3383f1f6a9f43ae4d8dc4","d789f002c2f2d6f1d18cec7213424820ce21e151f23d56e883660232464aa2d2","1e03d412ff92ba0e70ceb3089101552deb0fdf4030d4eb687013c5a330e5a538","1772ae032dd945313f44b33521311a0ab5014d3bb8149f94b51a2228fbe08e38","cb1bc2a9f05f65d52656ff8e9cf23a34b2ff23b77617c8d5d693673d3073d8dd","47a09ccd6152a852b9893b2aa6793433c77305262697b21fefad50717b37c506","826328db0053b998cfac0c22cd6c575c128ecfa4f75e9fd73febd75c9f8ee792","fd074f6b5b50b116ac3330a06f290a8ebec7ed1849b30507ad6694033af6e1ff","1d6688e1c2658422e04ab99dfb5c8345ecb419dd1f8c6994b4040572f5b4ee4d"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2524422814 · entry 108e9186e8c5677a9741…
Expected log hash: e042bf60ab37eb8951abb7a408cc8c7483ec875b9606253deec7a67967130ae2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787192294432","kind":"published-quote","locale":"en","page":"theme:sevdesk/ordering/en","quote":"The rest is easy to understand","rating":5,"review_date":"2026-05-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f8b4f722de05…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.