Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Needs app pin code randomly”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2fd6a76bed5603f62d93a34f6c076c237eddb18cde8934af1d043ce3da2c58c3
Signature (Ed25519, base64)
ZrQXqwqSbco0TD+IcU8GorU5efTyntAvZlfwgJUyiG/mUHzw+2UB+kgUu7KRAAbzQDYtLXQDtmAw9fGqV/vSBA==
Merkle root
d019a962265fd99700bb41421c12bf721bc431ce9725f4e9d547011775ab56ec
Merkle path
["2fd2090ffd8b1ee45d76c304d3cca143f1126a8d65388470f183a6a7b400336c","aa8e0c5b6efed974fb65cd37f6cd3785a385016aded185fbab33727b7a0a1914","b7987ac06100a0b4306f48b3bfa7d6773f3b5c1d03e44e1d847361c5cbf93ce9","574df859846fae53c541eb5ef7d983e82e44023f22d4a3518b600ff10ababc72","3393e58d1c2e33534a9501304b6966945b4406772967fa609326ac28e550be8b","d4b71f26408c321696abfd11a69999e151434f66acbbeef058aa9d099c0e43bb","5bbc544cffde476ee146470ad983de658e51e011f3a90dc685f7310210a66586","89f2d78f07eab18ebf4ab104b40ca91f66c495c58b61ba82caf5e28c9cea57ce","9c48aa8f137fbca9c9e5c61e33fea2700c06c65d559dec2d3d11ad8fddea8ee6","82a26bdadc24434280b948e2a6159c7b7ee99acf41155a0a06e47fff77047705","10ab18240877afbf1ee443dc8a345e3c36d40eb842fc0c4a1df94ffd80cc0622","98083d29a9180d39fa47091bffdc6d1b49b5901b294bf1dc64307e11f2779780","25df55d598b12079d620aec9368360c954a6b164b21eb3ae970d4c2a7a6d9ad4","65b176b4a433b701cea4a24b83deb2fa9ed09be9f26f9fdaada87e8434a57f00","a28f44db157d986c9333d9e3edce8ce71060ce7f7d8f4bff70f57fc26d48546f"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657725656 · entry 108e9186e8c5677adf65…
Expected log hash
b4666dc064e94c6d0ca3a2e9a0c5f9ff5cb70ce3ce9e0a74343a10c712c15a62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788147462663","kind":"published-quote","locale":"en","page":"brand:worldline","quote":"Needs app pin code randomly","rating":4,"review_date":"2024-12-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=eu.softpos.softposwrapper.wl","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d019a962265f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.