Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Much worse than the old version”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3a5de2f43d5144f442da5f397f7df00a29200ec4ad5abd90d198b9154c348c4f
Signature (Ed25519, base64)
uVj8VmzveKx8+933YGnSfdcT0sb6nVt0hTJsPHNOgeIJp4zlnuLGMvqKTdXB7bkWf2LO2MpluzrBxwpzaeSKBw==
Merkle root
4814209eff208716b4535c2b0fd0b03895bdf3189545e82450cb75591e4887da
Merkle path
["3a58b2852034b057656ad354b5bbe22749464dc24f6bb9ed5987007890cb1bc8","e7243de08b00679a41b8d5aa31a0a20ee0c40711e1e0b9f9927a12e4d1824673","c321a1ecfa639c9f19f7ec09420e10f67f1018f8d74234b129273319ddb5a17b","e860f8cf78aec216aee9dc194ac29766e81c8b6fd8fffac9a4b059fdf9090bf2","aa1b1e4ba6a82181cee9cc7b3f7864dcb01ef611dfdda76a268c125e62da92ce","5e7306dd327b30c48fb0af98e3ded54dee431c546d7b146bf1aad50507b1a64d","d57ff9055366222b136fccebd46948c41d9ddaef4162ac363771f358ac03d699","0a3d4a714f3f1332baac8ce8f49f9650645e5c572eb670b16cdd2206cba821ba","647566bb5da0d51531d5bb1b4dd579161ea445cf5e57da4235802aa359fb8d7e","e3e5ce5de4e93acdc19c1ba6fffbf46576c98f53b5feef118abf0681071cb902","d89a8f899a6e2965b11d215b5a978473802bf6daf35ae124f6a01d132cfc52c7","4fc3f7ad0e924885e102732985d05c6ed900edfc5866520c57f81d1a104dce4c","06056568f4a2b1f02479cb1a58506413e0f80ea3413afd3796bf7749761250c9","4222d4cb0e3cb98443733ef8f53c14d869249278d4ea410003cf03e3a343c09c","12d9d8014c44524a8d93c0e0f1440a3071b98d9de55311024d7d505c5879a63c"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671265667 · entry 108e9186e8c5677af0ff…
Expected log hash
0d4aa038b3cd3d7cc8a3744c8157ddb93929116887b29b6be030d34102a7e419 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788234112368","kind":"published-quote","locale":"de","page":"brand:fossil","quote":"Much worse than the old version","rating":1,"review_date":"2026-08-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.fossil.wearables.fossil","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4814209eff20…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.