Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've received no answer to my issue report email asking for help in 2 weeks”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
400eb7bf40b165a721f097c9a3c85c0032b125b86eb6ba16f2087424f2ff38f4
Signature (Ed25519, base64)
uoYbdAhF9JK+JU6JcIUpPj5+jW6en8b5ZYEqBWyaWazZRpJPm1C/wL0rXWDyFjGdZFq6FVHLyavk9LCaCY+WCA==
Merkle root
07e2d0de1409df9008c16531abbe2f8515ebe8e55b87a042e18a21958771618d
Merkle path
["400daa090ad076eb31e89665715321212dc7b3ff92b2a7656bae14e63e17a445","16853000b2a57f2efe5619cc69e6201b4ea2ef531f4be783f8005d720e9c172c","aa978ce580135267d6937e0cc830494bdbb3a90e4be825bc130e193bc39d6f45","5f4d9ee7a4ebd2d91e78cd930b1b8629099d7fda45a36a931c24887e988d2cfe","3ebef41c309b623fb9310f609814c8ba63eb30126be2bf25999f1d64cc111ec1","9b7f2b3d40e20283b95fab8544104aae5978064b581630f293b584a202eb8d89","a47ef730950f6a53725592a4adb7bad5d4b42966aca3ef67a6d18292092f7ab4","36cc8ca1b19046b4dc7398be888460a7154aea225483ee98dafb6c7b3a03dcd1","4c191684b15eaabd71f9ecee098d39e53ff7e918fb742c123dee569daa3a4345","2ae25dab102033e7053bcffd62bebc041e90633b2ef88436d619949045dada5f","3d6a9d4ec784580804def1aaacd86f23c4ee5a425d85c3674ffb4b2756c2ee3e","4d663f5926241f266352195a33380a37df27997d5729c36639e1e95dee72a508","48799695a25196e19e6c0bfac80015199da758df0acb5108e4c517a5d6bc016d","fd7778befb9f979134b4d8a1dfa78827e64c761abd83cab9d5ecd5bc01d8ea14"]
Anchored
2026-10-15
Public log entry
search.sigstore.dev, log index 3258201873 · entry 108e9186e8c5677ab04f…
Expected log hash
205b794967d70c4ec2534ff3766e47506acf44c7c68740049459394876120dfa The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792030899870","kind":"published-quote","locale":"de","page":"brand:everand","quote":"I've received no answer to my issue report email asking for help in 2 weeks","rating":1,"review_date":"2026-10-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (07e2d0de1409…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.