Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super easy to use!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514541190

Proof data

Record hash (SHA-256)

2e1a2ffb9aef3eca95f285a66e513867597a1c407f54fb4cce09637ceb6f2e25

Signature (Ed25519, base64)

Cx+ST2CShu1NKD7tYU1gs1HlNLzBgSB9vwVRCDZlXm4lA31oRnoa5JhrQp53bLg38IVIv03sG6DwX/UdrRblAg==

Merkle root

6ddadcc7cc1bb0679f63a30d8a28a2a72e039950945f2d7276487dd5b703ff7b

Merkle path

["2e197910e0e21dbec6cc2ca3b2c30c1ca18f88c76a2a1fcb180d1d8752150f44","242330c63a3acca6895b20253fe666df683ec97bc6f413bab117227dbe85342e","779862ae6d9964fe0f777a2874e9d05735f99d61eb56efbde159e78ae4b404c7","0fcc9105ae1f7feabb40aec287f9b4b00013d3b828f83cbbb53e9db50f490672","5d35b3855cb961ff6366401b4ed0c4cb52dfa369278db5a3e9dc504246ce9a69","88dbaa3729ce8c4ea73ccf261163d1fef584222d5bcc8f19099d68c54cb33b3f","48aade7ae584c5a0841dc8b153ed6b1ff7f11f75b19bfb893120ff19edbd8f68","52abf6d5925d8f80561b0e8aa7a62e805db72a3a456168395f85c1ef14f519be","8e47cab427206b1010812eaf042e557e92b92cee785280f1f0449ef7a16a50c4","5a87734c94bd10768efdda1e4668add51c67f84a15ffc62829fae7e2a772becf","94f179db66aa1b25e48c3fc2a860226b754e7c52d775606eff0424f20fb6dcea","13fded2c1e81ea7255dfe70ad4bf96cc8520a6f29071b3a4ec55f86c4459dbf3","adc0c6eb29d14048590505808b7289699c5b9115e3705ceb6c036661ccbeaf5e","9e168dca44eb94549433cdf178f0f0b1ef27534c6f92f24d9664ece03a3c710e","052ac7d24dfc9659210f2718e5c7e6b2477f3dc364546bd6ed2bd5df9d14d7b0"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514541190 · entry 108e9186e8c5677acb65…

Expected log hash

adca5adcd6d3235cf084bc9b408d3e4d7742d07347957346ff2629f37429bf20 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787130614827","kind":"published-quote","locale":"en","page":"brand:sevdesk","quote":"Super easy to use!","rating":5,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ddadcc7cc1b…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.