Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Y'know, for convenience.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
205f4522803b966fc1a618349cf0f7d56db3b3a7e299cca35af037a9d6c9834b
Signature (Ed25519, base64)
87gJijPIs2DxdGeNE4kBfonIC4SIRWgQy6Q9N+JmgVtPl39xpTvRMzCehuS+5rRdPgFAR8iRFFV7lP7xGdzdBw==
Merkle root
9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path
["205a5c197c8424b7ca5078dd5f9f1c09e7e9b791b85634e9e7887863cfcc5337","03a6cd007300d3500e8f2f620a98f7dd1a7efc756622b9437dc72eb42ea9e25c","c42d9e6b575c61d70a27a296d87912c0dd2922ef8f70d227e2e8721cacfba783","3526f3bc7c6d895e42d10a996485aee0231e816b492dd84d18984d6b661ce3fe","20dd03ce4b84eb9099e64597a2b571191ad96801ea80924c42e2b5de5babc911","4b3045cc4a6282f520398a5fdead943a8b5f9112f4d8af5e17b80e995baadd60","58ce20b0744114cf7f87e87d1cd36b9c0cc502394e05275ae4304f3901697020","94c868b576e11e92ba386dc1ea303fe51b6a241b0fabc407f1b8f46adc7b0deb","699a43b73f42fb66e691e66d5fe5bf2b1f4ff10f13eaeebad57f10fcbb2a054f","4dc1ab617666ddffb4747a40cc7e72ab36e186c21dc2180b5888feb26b00eac7","31ea8b16f16ac514eb9dce0a378038c2ec8b306248a6134940c93b42416c8060","2d979274d680ea02cf70c9d6188063cc19e622cbede790249a7762852386b868","1b6827f0620411d457632601225bf0c0fa08a550569ab3a9309e36b42067eb0d","97b419a98acf461915694d49df1436895896a22d4e853073303f64e609656c20","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash
a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"brand:docusign","quote":"Y'know, for convenience.","rating":1,"review_date":"2026-10-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.docusign.ink","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.