Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I hold the coins myself”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
444c61aa52d387fdc533f55ced0c3766e38541e6b7d4310f46269dc728837383
Signature (Ed25519, base64)
SDmCQCODDB+xVBPFG60I1K1hq/tahlAJ5DL+qasZbc3LUqThyYgMD+b+zINHVetOljVk+klMZzi1YDqye42TDg==
Merkle root
80de158564b7616572ca0c0059561f6ec90cd5bce49a388e61df989f3f6f2a86
Merkle path
["444c968bf0686862d8f5c669874616311b5bea6f075bf938f32b196dd808bd8e","1528d9a01504ae252addbfecc49ef148e14a4d831edeba1a4b2cd23f9c8be41a","5fdd9d492d66f51f6b672a55b441c442beeaba1feae9aab6c552b7ed9c1ca044","17ec5283f3cf1bae757e4dcff2153a8df49b9a346d826085826567d1af289d4f","8b4e68a620de0db4887b11a62db73b124fe7ddb50ae3868aa92a8ba669768c7d","bf5c3a7cf8a69fea465f3d28857b481bfc747e05202756468caa13da187f411e","6b774c86029fdcc013ae29a1115c6d10722ddf0b6a17c47981b5d1bcc6288e4a","0242e67f14e1ebccc7eb633a90672d809afc3031fb14f99048e40d74692973f8","537ab6d1e3d41046a482cb2340ba2cff917e2d38f088a72d0f8c08c4b871f28e","440aff6a56bbe3206e510b0140c53c9c7e466b15cc20283dcdd8374bc372db94","85b2ed1f1f79d52d42349046a5c7b50ff11b40f806cde31b0f7340ab8b63675c","ddd0e4c00dc720df062af8c3ada3e0e601d08b0e46b012f61ab57fc13eea2552","4ed704155a8c329bf8c2403f20a1ab4e61e02502a677ade2c54537fcf0c0aaf9","f23007ee336c6a9903bdec729de4dd7e96694a7e2f1071f195563e9aff8dd97f","68889fd35b89925b8d265e65260618471cd9c2f5458718fde3d6cb3829d8f00f"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2513802575 · entry 108e9186e8c5677a9216…
Expected log hash
5899b5d0ea18fa3c879147333708054c2e3cd77662f2b6f633aa3b5d5512bbe5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787121142818","kind":"published-quote","locale":"en","page":"theme:relai/returns/en","quote":"I hold the coins myself","rating":5,"review_date":"2025-04-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80de158564b7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.