Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've tried on 2 different phones”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
383f5c6f67a2afe7cd32bc19cdb96a6a2f8d70222ebfeeabc3fd5b111fd1fcb0
Signature (Ed25519, base64)
RNN9FQ/X3AIzmqdMlu2C6dW55pPOxUQJwqpRyfQNnOezABVUf+Hp9bTq/o8U5dZEr+Ozf9C5t12Z9QN2YIPnAw==
Merkle root
dd0580a8af2e7ca4475f07b02d0aa8ee9c22663c5492014f0cc859abdcf6de59
Merkle path
["3838af12e4ad57ad9a915004f6987d3d38bfc104a6158e23937c95fbc0405e01","9130f5e58860f68a82be74e4186892809bf37b9b4b44c1df339b04d0b786d801","f02b90cfb355c6da4947afd24db255932f994ca762589bf4e291268426a1dc95","e8a83e7fe0f74d0a3d6185f31e717862ca6a878a22d2c0527459b174751c735f","424aa51f93350fa4a9504723d4070c177770f1521769dbff94ad8924ae959101","a1cbef444b20dc864e8bb348aff7bcbc83cbd7e4b1721239c3414dec64af0783","f175848e05740f1268c9df5e55edd4096b83d9ac313c6f4d071df333ac7ff58a","bdebffe1b6da05e398827349451b27351c5d62ee96f199d13193684ee58321a2","53af9eea91fe9955facb1f42eb615b915551667f3f710348ce9a10be15dfd355","348cc861ae09aca590b7460effa9c4028cc1e5ae9cf0a6614ce8150381c2f7d5","d6d496407f74cd205b67cf02f28e70447589b1a8654088d81df1da28f5e28350","bf6d97037ef5e7075876c69fbf877922ae9fc63b7dc5f5772c60ae3e363152ec","f97be36d180de28f9a505344c9adaf980730abd53f58ad7d4e0f4e88a69eaa6d","d4f6b604034af6f00706eeb6518cce3b975aecb4321346297d85ef3b674b9c73","70c90f1928666dbcd54b9b799948efdf13c245bd348521afe243e345aabe9257"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2681825259 · entry 108e9186e8c5677a0428…
Expected log hash
752a5ca1b3a34e1550b95dfc32e3ad1179be4701807e5cf6cd525d9b7432b3f5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788307680420","kind":"published-quote","locale":"de","page":"brand:zettle","quote":"I've tried on 2 different phones","rating":1,"review_date":"2026-08-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.izettle.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dd0580a8af2e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.