Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Great, and the receipt scanner has improved significantly over time.”
Google Play · 4/5 · 2026-05-19

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543154575

Proof data

Record hash (SHA-256): 3b6eea6d1931465d93f1eacff76228932c0eb1ecfbd366e086198c0a3b52e2db
Signature (Ed25519, base64): 4INI1lbBtjBpeaQ3b3SXaaGAzMQ8ZHwNJ8V3YFS3C1mE5g9YcLIejOb9z97saepUd5BgvFvr1D/73RIauon1Aw==
Merkle root: 9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e
Merkle path: ["3b5fc6f5e5d7b848216ae21a8e3b8b4cadd044369d4ad448d613cd13749067f5","247b15bfa37d28a0d058aba6624e4d91a25dd78ac29b46a0113835936765b89d","d0b92a1265580dfc81468eac26b7b3e685565fbe4dbf686bd814439e198b26ba","932df566fdecbb870136f0f565082f53f1f42ce3e95fddd8588e13ca4393a906","3858a177d23f6417cd0fc086dc06e9be7c253dacbf9389246c3d2f2fcc268ec5","7b0683f0216369f6d8e5fc9972623078f7693a9872a904e5fd7b78e31976b4da","b37ec87b05cfcec62c89abdb8542dc5ba7fa7133dbacf2fb16a7973c230f72c4","a01c2f88d12c627cf934d1f8149306dd21ba232e8335059f3904925010f97ec5","9cf7dafe31df08ccd252a716b004ddfccfd159bc87385d9a64081c541cadf4cb","3234b4ba6f5dab0b5208d0ada545699a0aa146157b05013c6ab5d88b8519f368","c3ec0e4ae869b96bebe38872fae500cc108b653e8e3431d913788325f4f7e7b1","6cfa292ea4c59c0be00d2f66970090451a732bc5a1aa0d6c7f7fb04538bf6096","eaefccb0e1aa85682b1d5eb0fdeac76007d7f9e97f87d680b9b26b421dc772f5","78e3a01c18db7a3aa85fa160432e1aa22e4b131e9c27c5e2e4566764a2ee13b9","deb69ba818cac6d60ad262ee5febe93ecfd14e4c978778af299f82ef8a69b934"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543154575 · entry 108e9186e8c5677a0eab…
Expected log hash: 0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787284115102","kind":"published-quote","locale":"en","page":"brand:sevdesk","quote":"Great, and the receipt scanner has improved significantly over time.","rating":4,"review_date":"2026-05-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.