Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super easy and done quickly.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
255f20bb4cd5bc6bbc8ccec8014843feb11e69779e38bd0f40eb28f28a7a2449
Signature (Ed25519, base64)
mKpwj350rAH/2DpuACmqUuE5amgrLMTjP7+ig/lUliFWKmw4NkDqH8jd6T6JIw30cKaufhkKI5QWN7xqhQCkCQ==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["255d7fb01c43d1f51af4fc73ce87043acb201f8795fb7570b1cdda60e2963647","3197db4877d83ff7bcd23d4aad380f9166aa323484d27d5bce2c23008b106159","daae9a50812ea52d644df786ce2cb7a95010870b780fb72e5a9c03e11a23c6c6","89acb8b0378b8ac0d8d4f65af27c4b6d15a93c8cc38c44fbb61e4e1e4b5eb229","d2d772e61fb3b53ef76cd2630a981e09b39846eebfceb5ec4820067a3f0ee639","989ba9d4c473113ba63b65788118a55695a86b5a1b7cf38168f30a2a6f1d635c","451f837cdcb57afccc80a0bd895dda1a9d87e9810a44949dc25a4aef347d7f0c","880a8017562fb134ee4958763cba029c7e352df16226a084b9adc0e629335757","96515bf8040e4a986db903967377e81139bb802ac98af5121885289b52c693ed","67bb40802031eebdf3f89c9f6c373eceb706a9240b8c021432cf2b745468eb94","3396d74d572003ee8723799c4479726634cefda17db2058d492c5b9840098b7d","e22af44fb49d2b04fb7ab31e443c3ee0a9edc15017590ea83b2e206038b35b0e","c68553b05062bff5e92df6fc931b0fe41827a2af51cd30b80fefce371f89e614","1f7b489a0f1f52a9099db1823d706668c4e68c1e17b4e235c9596001eb5af1b6","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"brand:taxfix","quote":"Super easy and done quickly.","rating":5,"review_date":"2026-09-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.