Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the app is fine”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3367246576199d0f32c8dce7d35049092f8571e9d0b86ebc0d1d7b3d279e3f68
Signature (Ed25519, base64)
hK5iqDXmS2py8w+r+xsRABdcX9GrDI+VJGurZMIa5mib5YrJ6WFGPOKUZl81rHUI/7xlzwniMcrQCrzbAz4GBQ==
Merkle root
c5671f9a997da9b293a79ebe58b20e4534ae608121169f15a5adc358d42ed147
Merkle path
["336870d1cd6156d3646eafa69e97ac75214e960794cd6ea8dbb4e42488ffeb85","8bd10421d2f35014fc707630af9af65ca6853b45d9bdc3a925aadefb54f129f9","3b50ac08cfb8268288f5dd59e2f6b35aaaf5ef1edf40642bbfb65d285a4e0ebe","39b280f6c2a1e1e98519411ca3e1966318682aab1c1bca92f77c7708bbd670b7","a80adbf858c40c93469ca64ed30dd5cf6c8ffcdc00d83fa30c82e085542cef24","b746112406b383709ece3f552d0880ce3fcf300e679a679a3adde52999172c14","eed80e38f572306380a13d6785d3ebb88811275ae6169af6878f3523cd8e540c","1d72529d658f2b77678617ee12bd5f5372b99b8eafa39cc85f9bc32b6d9eec1d","24b8c0fb1e4f2f27484d7a89fa2a52c09d87f368b649ab63d4c32e43e3be7bfc","91e85ff4fe825f2c9d403463a57e23fb6776aa899ea33866d874b5335e3abc7c","49f469f8ffbeee7aa00f060c0054e8bf2d134876fa7cae400bbcadc80c46d949","6fdd4a60a15e1fe4aa221e3e49c5ad8c198188607c3dc86144689c81d11ff4d6","fc11f12841aa9e89e5390477ce97b5eb6b13b8707be59ab0e8a4348eb3199751","ea0f272f47ae04446ca8efff4a132a738536c4448017d0d61c5eeeb962e76e8d","064efe6476d8e8bd839601b3c80763b02793c41f87cba57580faab7c00dda24f"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081733041 · entry 108e9186e8c5677a0bbb…
Expected log hash
88ab7ac46d4614551fa6e665889f054d7592b15d91016a45621b5c46a7ae8e2f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791174108170","kind":"published-quote","locale":"en","page":"brand:casio","quote":"the app is fine","rating":3,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.casio.wac_app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5671f9a997d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.