Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It works great here in my city”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3220562278

Proof data

Record hash (SHA-256)

45a26388d03fccbcb58c6b4d2d0006efdb6204dc9414a9232fc9b5d686c7bfd3

Signature (Ed25519, base64)

xPuXdjUQjreDhXUHhEnLSZkceHiBxvEz+9N8/oAYySCD8iz7bkXBvohLQobtJj9MHB0JmSlB+icoTnKTpn1HAw==

Merkle root

2d214bb14438515f4bedf5edd9b00a6a5113a016ba9b9fe8160d41d7e6046722

Merkle path

["45ac33ad88b32e15087df65680aa07069763d77b0e1a264e09f2c7a192b90961","46c48f41c81effae54002e9c569103c23600dfa94b5a1009116a985ba294b5df","309fbb4790ed3a0a4b03a8739bb56899e207e52414a958d8f3ed5c13d4823b8c","a7e7eb90676845c97ca88a3092f890edebd5aff7e4eb597a345ce71162448b81","c39c7508f9ce9acec4d945d2af9f21fb55adfca02bbd8f9dbbfc79a5cb52994a","302d2974327f6b1e6926cb1d672672301171efe0e19dd8e9f7d9b29bee48ca4f","76aea479e878b49393787700c180eb8a910cbe21509ccc0d537ef0aaaa62a670","540d572bd78b74d656402f616213733bb44d7423d86d1aba0e8c5b6f8c579c66","a117d97d2ec6491fee0b6cb03c1e8e29f11f929b9d664bd0e412a32f64035c40","f375438932e0fdecac642aa00a1d0e39d19ad3cca6762436d2db1fb344d7fc7c","99018faa5ad0d28664cdf895a0d291f9e9325e68283ffe73dba89bb27fc962ba","23123a46a6d30e0fa59a691fbe1dcdcf32ad32c111bb8e37438ac91b1152017e","184cc1e2f93da59337f7837161587a67303bd364329773d15b922bec0848e3b3","35ea2df06612b261a549235c4e62b3e1ad1789f05da56f9ca671421e5071b72b"]

Anchored

2026-10-12

Public log entry

search.sigstore.dev, log index 3220562278 · entry 108e9186e8c5677a2753…

Expected log hash

13907aa3d3da271016c4b5e75946c4440692c6b4e1684187b965dbb983b157f7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791777669660","kind":"published-quote","locale":"en","page":"brand:uairango","quote":"It works great here in my city","rating":5,"review_date":"2025-12-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.uairango","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2d214bb14438…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.