Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Points are pretty useless now”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3667dd605bde06955d4c4789eb4d7158f50d2ae2855cff9157811450029a924f
Signature (Ed25519, base64)
R8lBjYT4AYyOrm4bSiyT72Yvtp690/Mp5afTaeOeC80F6Ijnxt6PFay28f8SlqvCRNh9k1VesGpkwhBXpBAbCQ==
Merkle root
fd6fca9e7cef37aada941aac92decfcc64f6ccf1f80e46f326058d1dbea3be25
Merkle path
["36696781187ee078f55b0eeacc9f52bcdbab9d46ae41348101d6d4b51705a307","c5ac89743a6f57ea42720b5e6a9abc10610efa57a0bae1893c6f6d98fc840943","c5bda7179fd3cd04f82a5848b80d19c8266c9cc523694a8c84e6abf085c446bc","1499b72fad595baaa08ec04b00deb9edee461673af6c58e90d1a2ba31a1bc040","f1aeee1ab75a32185ee1696c2b5f296a45598e29fdc89a9aa0e9bd367929a438","4ecb900ede1244969e47a368985c0f52650a685385a2a6dcaccf6fc6524a9600","8efa269c109fe335c1f3e56abe5f9a6ac892d861ee93fc36b74d10794b35640d","4ad23879f8e0948dc231013d8c829167d212b069e8c9ddc2cb96566857d54817","1c308e459672f6c7476ea2ad98b22231ed288e1ced530327a2289ba953f954d5","5f142d407e4eda0768b0b60518314351a213865752a78617005d4814cb7557dc","7445338296781921ed2de26bccbd677eda77c59713cce3e3a39f13f83754c4ff","b7662036da600dcaf55eef62bd3bc57ebce4328e121701aec5757749fe32395e","91d6c5ae04d3a04b4b770e93da7c2b24ba5b08a5e3c6bfabad201d2c2bb2af80","af8b7672f7140c4d5f8cf5a204256eb8a0fe0ba6770180d832059e5b511f691a","d2a30b01208ae5f7745e5c8a474c1f34f9628e43b7a0d1b0d1ac6b378b7f866d"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2632025295 · entry 108e9186e8c5677a7e39…
Expected log hash
327cdca6f67e0b8900de427ba632e65f297b0edb716ae3a08de15ff81c0cf3b3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787971088504","kind":"published-quote","locale":"en","page":"brand:swica","quote":"Points are pretty useless now","rating":1,"review_date":"2025-09-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.swica.benevita2","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fd6fca9e7cef…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.