Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Stay away from this provider, it's nothing but expensive”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
36e3cb2a493475500707646ebf7f53433f6fcaf094f32ff667cb1c35e095ebef
Signature (Ed25519, base64)
P/KFVCziwYEoiUg0MW7ckTTgYeyy5VurqoC5JHRghxI9Yn2PLoJvZhJZIzEzKSH83ektGZHgC7xaT+qW47VgAA==
Merkle root
5c4849a28e8624d6f6d3204e1f81a6b24f2188b6690e8b122801054617ca25d8
Merkle path
["36df4f90cfb9d0991527325a3d13cd5c0bc402753804f88d442f16459782fcf4","528923a42a134a874823eb611429185906e9ef056912df10dcf4ea88cdb27c77","e986b8815e0ed9d78faf01bebfa6c0cfdc200ee7f301996ee5564b5295154fbc","03b79836cbae7b0dce473b6ddb58988eef48e55b4f39819f8bc4a498f72f6ae8","5d176c7ded3db383831232c9380e64866cdf54825f1469ec1a1144fa14f9bc96","c307429ff30d9fdcc3da9f5c2453f5cf23061a0e639b1cc51b32d7048218a30f","9ee1851e4d5d630a26595d283335d276260412f43eb0a44833c1b4ac40ee6d9c","2895e9aa958a446da7d489fe0916494a2626ca844308ae0be7d9bea0842697c6","1560270db748eee228f616ab9f1aed6dc84180aba50f70130d07f3f63d2069d7","fe4dff529462bd735b08f7133b990d228aaebb303bc5ed9a34e60fe2616d7b1b","2d39e231bb1e282c1b07b320602659b1867f35385edf99e5ee29d091df70da73","9d2e5b97810f7cb6aecc46f6ddade4f35ec5ee034d5538377aeac8eb4507a8f4","45616304fbb070f744d098367d3db0bfb10c29fad886560a2ad4fe003bd3cc4a","9693116cb745ecfbff942949993950a2efc72f3f48b394aa6516ac43c745a9a2","649f189ed3a422a3ffceae7f7673f3e683a1fac940fd27a4d89bce585dd48e49"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524617489 · entry 108e9186e8c5677ab139…
Expected log hash
2051fcd76f2ba790414bb1c15fd4d3d064889742ea46f8e55b5028f1f571c27b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787193158162","kind":"published-quote","locale":"en","page":"theme:sevdesk/price/en","quote":"Stay away from this provider, it's nothing but expensive","rating":1,"review_date":"2025-09-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5c4849a28e86…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.