Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Much worse than the old version”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
382ce6c0a714624b723b1dda0607321fc3146ade6c0201a7f32abf1c6a43ef06
Signature (Ed25519, base64)
ed1mOzvt/TycGngMJ6TcgouXOSTwqonDdU0s4Xze4CRfp6sjMg21ythfieYJsyM5aXhUtdhG4YoC28uyxoipBQ==
Merkle root
11760913b24394c3efea903b5693403de67f30c73517589265e62147ce6d7db9
Merkle path
["382e7db966db9a24ae1c35bd9b67102dffc07c2baa4baa3e89a510bc14a17c0c","0a213aadd7834bbcf5bb88289cd911c469f7c86ed93785193588f55e20b0ed81","451688797778ed6ef2d9a110849fec5a24f5d1bf805aee686f2d943285f13b7b","a25da5c5f7d16fcb43ccec52c307dcbbfb4ceff4749f3be58e2d99cd4e521695","59318fedc4f7b70539d851c2cdc1eacf2020d9127782b304b35e16d722b51f85","d0a24ae257e1a026e4bde6037f691ae494da82800ba10cd15aa1b6906aaf1810","18b6e76d77842f6f2e1fa21d4e28512a83d8142b40f78881c1422ea97d2a80db","714753ba4ea7692b3d0baabe956d421064e61ba3eece57e756138f57b9b33cf8","7d72578a5fe713568a6c51f483efc66ea1f23a2e6f2f8dffda94e40c718e1e10","c6d4cba2a9744627ba34ee467e50f9187f40deb951d8cfeb3f01013b4462f11a","a38f767b8c7ba74d21a340c6c9ebf8359c590d8602ba85158942639e32a10c6f","aa22cf1fdc03346a2c123053ddb0b135bf2b4bd5ba09ada92d8cf4c66395f55c","454853845749e4e19e9a4a1e7f5d435e84359a89724eac3decff058059c6dff2","4d94d9a9168f14be08d81b3238e6d7999acaf99b1233bada5f6c2802401f1b45","8cba8822ab29049afd67fa646ac9379523fc6be8932688ce4f3067f563511db4"]
Anchored
2026-08-27
Public log entry
search.sigstore.dev, log index 2612584084 · entry 108e9186e8c5677ac6bf…
Expected log hash
0a57a1a3ef828bcabfde2971260e46ab649b0f8c2c96e231d49bb83e51a8ab3d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787801559681","kind":"published-quote","locale":"de","page":"brand:fossil","quote":"Much worse than the old version","rating":1,"review_date":"2026-08-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.fossil.wearables.fossil","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (11760913b243…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.