Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the website continues to malfunction on mobile”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
357dfcc615f22deda5bef6e272fe33386cb3749a3910e5edecdfaa94d9f66ad7
Signature (Ed25519, base64)
G+vCmUoQ1iwoSh+Oo7N4COIyWzx0G91i7pC2B0/9jHN+PTOwCZoWc9+ZRYEoAqK/gbK4l0RpKr4p549dU5u8CA==
Merkle root
c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path
["357d0a373454cecdc3e183a55a709374dbd4c8391174b29e174e81ba95e75309","202d2e7b88a9f94b826bdfc84d16f15163464958df226af381157bb71484976b","16cbc45d3f0f9dc00045f71de964c16dde9ed6b991d39638cf529017f0b19e22","eb0f615ac5f6857a24d0b40e614d58d46aca760fda30c0b106a639a15d20b3e1","3f52ad3167c57ae52f0fb1e6d3ee5548f613d36b0cf470a795aa6ec732c7c918","a2001a57d7de23b48dd8657b94210d64f2d563fdbdae0d49309c2042578bf7d1","7d7504168db42daabdf78bc29a69a16b6c72492b67b559a5df2f2ab436af86d1","75f85aeba123642406f3e18a0f8f999c9477f1323593edd5578fc42fcd0f3d00","d6e437f247ea9a287ab9c597c2c2ec9f35570aa487a139038dd4c5d2bed03ac7","c50b416432ab656c7f1fd2f32fe2981a8c3ddd88f27683284e63acc49c2eb81b","32470877c13dd25662f9e0894cdbd2c7cd4319c9ad1aab45a1d01a047578016f","12b404965e7d77de1a7fa9efee24928c0644553675e2a5a4aba9829c8b43f7ff","909dc236a40474146d6909890a2efc2ebf619ae79402e768699c3ebde39b1191","60db5b960c74a953fb3ebb541be0d84a0946a38e137e13155b739ca3fdae1b05","8308334b0715cdc2685afc133c95aa85c9b86c8dab9c8659092b74cf2783feda"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash
5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791348381030","kind":"published-quote","locale":"en","page":"brand:stripe","quote":"the website continues to malfunction on mobile","rating":2,"review_date":"2026-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.stripe.android.dashboard","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.