Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I can't believe this app has such a good score”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2647203528

Proof data

Record hash (SHA-256)

377fb780580ca88efcd774bf85eb58ebbc849315c37de4175df34b4be81a9fe7

Signature (Ed25519, base64)

etehGaz9EYWnKG3x9bJy2a3dgODvd94Yua/+C6xyLssQ/sEibiU3fsZQIo0DINznrgFOmjG/pa4RZWdSg959DA==

Merkle root

d46cb1ae251ab4eb9927c9aa49346d5122e0972e95f3de0bc747783e39627b20

Merkle path

["377ef617c51a27ccf5c2067820bd6da5ab7414a9ca22399aba79010416c9c739","efa50077fa59203c7672b20918b9f69e53d4ae0cbae41ba37e479df69631e438","d4b0ea54b258dae6905d2f15e9605dd9ebe23d765fd388c9453d0411a9538abb","1029f46ce9c7a6d6d4318ab0fdb1d6200b1dd3e490621abd723b747e38ae6dc6","adf3e58d9e71e30ad3427a5b4846a1e6e17dc3a9f853df766d5c72d7909d2e02","658a158f7f26590afaea159ced6088402bec5f516d83550dbc8606366d8fc168","4cb5bd47360fdc70a3ef1b4fd6f30790ed996c0f1f327af723ac98c31d2f7c6e","6d129db6a32c51f5fce23efe35dcb1dc5bc001ee983f4a207399b912a7424ff6","775f08b66127f5ab7bad9615481fe3ef8238f0a5ce51122583e58274ffb0748b","851b5061d8cbaca25bf187fb00959cbdf0eaeec769558b288132bd793d332403","5b765677bea168bdb484f05cc4e4f5837b7481c38ca73d038f11628dae7b521c","d2237d7eda6254064f3f32f716f7a1fc700573f1a432a2273ad4fab7c82c9c1b","f57f9f8247dcc23bc9fd0acb0fa37683c3c4a593b5ca8095be30e839c8bac9ad","68887c94a8ff3f8133d2482ef2c9bbf8604123a7794f1bb2158536146de3ab6d","0833ef6f4a75733be647d99ef9b7298f3428688ff5df279f6c54939387fc0497"]

Anchored

2026-08-30

Public log entry

search.sigstore.dev, log index 2647203528 · entry 108e9186e8c5677a5a9d…

Expected log hash

7105e6eba7c1fbef8f8eeceb10ea9f96e5a1584032fbe98d2da1a28ce036bdd9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788034732495","kind":"published-quote","locale":"de","page":"brand:signeasy","quote":"I can't believe this app has such a good score","rating":1,"review_date":"2026-05-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.glykka.easysign","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d46cb1ae251a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.