Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Easy-to-understand questions”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
25b1bfa3f6ee5fea1876d31cbc93923df8369dbb8ba6d9bece9a4169b8ace9fc
Signature (Ed25519, base64)
WwePOuPGIZ7tbQ9PrHyqHVM5Dws/aOGJti2AiR3XtGzoSxOeyqhfotviKmF0dpMwG5pRsr1E+29RJidkTORlBA==
Merkle root
8087c7bed9871b345d05d836c29af23fc0d9671c928a1e9363522a16fdd7cf0e
Merkle path
["25a097b6d6ac46dd1ca7c36b5805c954f90d02c9566dc9d90f25fca4289d6f8a","5ccfc37a4adf055228599771c2f6a13dce931ef29a464264104f61010efb1af0","51ec97a147cb56703b530072a63da440fbcbf068d30eff86dd733da5c7031cc2","358bc7446942a88b41a4639b774f9b7fd419fc75678e362f356b25683c434bae","adf6fe31e3dd13bba818ddb0051fb1d62ff8845994a92405e45d915bece2ffeb","b29e07e6068d78539851fce3b4621f4fe6a757b1d83bfcd96aed1eed7a192643","3c18f3f9b7ff67d241640a599968a3b2f83c18fdcacdbf3c35c5d9ce45a1c1d7","ea4ecee33ac8837bca14d15cbb74e139c753142b809d683c9cab2499f4f9b3fb","19bd73edd3e7a5cb363def1427d443d16efd5bb6bfcc28dd802d20cffa07cf0f","944b794429091a3fb277563ee7c9316229d969a7a24ebddc47ff7255c9ccc907","fb0207101ce58e435846f76f985fb7ecdbca64bc0034c796c1b2aac16eda15cc","dd1e9344580a7e5c84f178c6d6df7060143e5ad383d351d54b23ad5d2006a175","ff3de92826a51b26559d771769aacc55c0c29674c4624825ee4c83324e354262"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3665494160 · entry 108e9186e8c5677afd35…
Expected log hash
acb694f91c9f21a2aa3937fe2dde51ea325ba950847651b126189aaae43ab56d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793698916160","kind":"published-quote","locale":"en","page":"brand:taxfix","quote":"Easy-to-understand questions","rating":5,"review_date":"2026-08-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8087c7bed987…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.