Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“not even allowing me to fully sync the data from the watch”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514297706

Proof data

Record hash (SHA-256)

39f9ee95ff522a4aa21bc7777530708bebd26f810bacb7239cd4179d3cc010e4

Signature (Ed25519, base64)

7k4lsCGy4a1tjE/AuqF+fgks0hXzSdnVkAfVI3mpxaf3FQWzCwLhNxFbS4GOTb4AKKtNJ5uThi2sCRcDZayiCg==

Merkle root

1dd7fec10002d9304505761bfad9c0f048c94d1d6a0775b6fc4291f712d4106b

Merkle path

["39f978b3af127cca4b76a2771f5a3258f10f160040f650e1747f6b5c1f0fc8cc","0fd9a4c19fcccfb2282d7fa8c61538dfa0ec710ca94e298fca50dab576f6ef25","78d7aa7acc1ac7cd7ddfa48b4c70ce138675f2d5fce9fbacb436abccfb748cc9","d2019ac67adef9ee3841e3f218aca885b64cc67d2dff78f1ac9cca48447e6537","9aca3f40a49e9518ae18f8345b64fdbc16cac538dba294646b87bfcbbb028af3","016703a896d788f07121bc3136b095eae016c4318d5871bf69d5c1a2378690a6","98106d4e9f9c17307b9273ead71f248fea3271faa3a078507ca3023a3402ce1b","f816d90804e6b396f2899495c244c1af9c8c0492c65c7f73aec1d90b29284a72","afd513fd7c11939b25fd6ca222ebf322873b30f4f28681ce52800ffae2695a12","42e0ed051d0a6e063ff98d0961275a9cc6bd489c811e91b55b099a3a4096bbb7","abf7351eb104e29d2c6012be24a110eb7c16583d319eb1838ff7940bd1ec5292","63140a7b4811bd870f16dd92bcd1060f3b5aa64f6aa47d4aae76261963134c77","b7aec9f3c94c31d180edcce99e1c822102bdcebd141a0695527f2567ce2d6e06","96733967bd879589a2091176049a40f13c26bf93f656924a17f15f3f405bad21","54bbc2d7930ffae8e416e662d825fe408002ca5c9c581c2388ff0eb5a37134ae"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514297706 · entry 108e9186e8c5677ab801…

Expected log hash

861cb9c1424d2f408888a591a8305206c340f8249f4a4581b32f940ce8815405 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787126020727","kind":"published-quote","locale":"de","page":"brand:fossil","quote":"not even allowing me to fully sync the data from the watch","rating":1,"review_date":"2026-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.fossil.wearables.fossil","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1dd7fec10002…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.