Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Absolutely great value for money!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
326af078643e03c732ed74f2af27b89f63225422d7c57ee98420bac98b5bc8b2
Signature (Ed25519, base64)
6cq3Nx7Fa5s+LVPi/ybBnhtylrhchGFK8QNbsudA0/1YHg2Rd/l6fdqGpmwIqdYgnBMpJHLGYDgX5Hrmt7CnAQ==
Merkle root
8c6268a14330d1a3403c561e774645b0671f81571ec1735d4674ebe1de7502e8
Merkle path
["326a61a343b6e61fcbea9bf8afbcbc521d2c1e15064365919a5d909c79aaf7a6","a46cf1bf1faab22ef2f39d11414eb114a217a0e17e965cc16031736d8d62f2b1","7a3392517fd65412745a366c36dfd633d0d44ec3920c756cea528c43ef2f25d3","e9f3e4c3f3dc449d14e9140cdf996e5a733cd321035379ab392b5afcd392dfb8","3f4797600675deb538bb1b2ea8cb0971661478067e6bd19b59755733bd74de47","450223de641af98dc873b9e5ce50efd8b48a5de069cb8bdcc06f6ca9f1ff92dc","eccc2c7f6ae403d65d5103447db640bc1284ac6b8c5e1d290ea3c2490388b2c6","901f88bb2650194eb823580af6700a01dce0c9a2f92057464178e90609a3b01b","af24866edac1e6387f6ebe66893a87e758a5b1ba70065bf7ce0f8168f6b88e10","f0a4100c08d5287506a5a8a7871d06795714383ec0b6096763aa5ee08864b4e2","2dc8b278464a65e55a43ae1b8492bea222fc914048fe1a1145214e92c4afce1e","bbd81ce977b62d941970a51d978795d1ca8d2e3dac3434c43899db8d20191a9b","a130748e37a17fa29f4013443a16c6ba5d7fca63733ddc833e40182a59b453a9","894fb50f273584bf006781fb08f5958320d3e5510a31da0d6339bcf63d847254","f548939ab1bb46e2c6638c372c3e2eef0d561ad18c63c15229fececc951e0b3f"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515439294 · entry 108e9186e8c5677a4f15…
Expected log hash
128701fddbb19410bf57cdb2d04d7a0278d13bcfda6410d76f176fa58341e1c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787141082461","kind":"published-quote","locale":"en","page":"theme:sevdesk/price/en","quote":"Absolutely great value for money!","rating":5,"review_date":"2026-03-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8c6268a14330…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.