Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“always excellent quality”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514541190

Proof data

Record hash (SHA-256)

2c03b99a7d8be12c9c31f7861e6c9f168efac87541a0a579f3f6f0bfa4e6a218

Signature (Ed25519, base64)

lucwVmW1+cFKbETZ16ck//hv+3BMjsOvKBvO1/tkn+tf1fjs958TXlhXN2uZLKeBydnaZGgQvMsYiLc3rIj9Cg==

Merkle root

6ddadcc7cc1bb0679f63a30d8a28a2a72e039950945f2d7276487dd5b703ff7b

Merkle path

["2c044d07482c4968306b7e1d7d21fecffe01fedc30cb5ed0377794f92e5c55ad","8d6c424d944ff9e6f2d8601abe44aeb4508413003a9bc2fc298da9370d773318","0cd8c447e10140b0b8cb6ecc32434e9e7c0c0106ae8f33c23668fac4016d37b9","0595dca6f0ea92e2cf976a0273172eee1a5d504e144e3b1b175b26962b1e4c2d","456c27556ac7fc27db7734ad444df7ab5c8f64ba45440424db1c90fb8834ae56","94520ce1c11728e8e6734cdfe1bdbde9b66689bc34844c4a58be0c21ee9f2a29","4981ba3a93298743e3e6d8908871097e0b1ba04d26fe8b72488e25cbcee5cf3b","e52ca70c577e31e17186310731267f785878bcb848886f020f7e76da836b3629","f044b8759092746af2ac00e0e83b30518ed32ad09c21cb724a026627fadb9bf5","5a87734c94bd10768efdda1e4668add51c67f84a15ffc62829fae7e2a772becf","94f179db66aa1b25e48c3fc2a860226b754e7c52d775606eff0424f20fb6dcea","13fded2c1e81ea7255dfe70ad4bf96cc8520a6f29071b3a4ec55f86c4459dbf3","adc0c6eb29d14048590505808b7289699c5b9115e3705ceb6c036661ccbeaf5e","9e168dca44eb94549433cdf178f0f0b1ef27534c6f92f24d9664ece03a3c710e","052ac7d24dfc9659210f2718e5c7e6b2477f3dc364546bd6ed2bd5df9d14d7b0"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514541190 · entry 108e9186e8c5677acb65…

Expected log hash

adca5adcd6d3235cf084bc9b408d3e4d7742d07347957346ff2629f37429bf20 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787130614827","kind":"published-quote","locale":"en","page":"brand:myposter","quote":"always excellent quality","rating":5,"review_date":"2025-08-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.myposter.myposterapp","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ddadcc7cc1b…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.