Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sends me a 6 digit code that i dont need”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2aecde40a3f8472d16135149a471cc476ec1f9cabf341b5d78c38c78021848c5
Signature (Ed25519, base64)
uZen2nlo20q+I4GrxtanmcQgdKpO20MDxfUmuakAyT32EoZnDC0MzFRCVUe20WIB9nowdIUuIE6o/hphW8GRAw==
Merkle root
ee5cb7d5466574a42af50a5863f2e6b08707c3d7337d478e2a75ec5974817ca5
Merkle path
["2adad1ff1a48a9f17b53901eeccdf8c9c96d90a0afa0f2caf8739c81a3f0949d","8764008794ed21d9b591e22aadba46b414eecd8fe8e0bfb041974cd3b2465bff","e46b0024b0eedad4154f639c3ea59a9fc1db0705470fd42a8cc6a5ef676c6a8f","015ebe09167f0c760440d521d647318ad566678e6ad6c51be3685f880310a42f","4d6f4677157f56e0ad6b8b53cf5b463af46e38937168e5842ede277a916c33ee","9760a6a57e1f71bf9793a0e8688fd1bbc42f5db2645cabc66a4edac903751bdc","e84e37170371d7ed97ca516f01c3539ae090a14343d3a5365f919f98d2ffae89","e11e84f0b371a1c03c320148d4ac22920a5a40a1f5c1147ab1743913d26f5a09","bff9748f6a3231c1396d7995e4cdbfb5d9e2e4abd07a08527fa39e1318f9ff1e","a836ac51f2590b7a3c3eff97fccd9bc66e61715bd365304e1e9ea5309dc982fc","2f19c33a5e477fba699f9c69468d056a3e008f9835538bdb80831f25adcee573","fb8b682d716abc20ee1811f631582e5ff3ed6a0a594d129431149a8bb1d370cc","2a73db7909019b8ec3460673eae2069c28cd7cadadc50cf37b832bc38db68e45"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3668444190 · entry 108e9186e8c5677ac70a…
Expected log hash
6a62ae4e16460222b9c1147d69e44f936572be00297966ae47e1c0e2e60f1a72 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793705698743","kind":"published-quote","locale":"en","page":"brand:xero","quote":"Sends me a 6 digit code that i dont need","rating":2,"review_date":"2026-10-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xero.authenticator","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ee5cb7d54665…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.