Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Had a great experience”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4bf326728aca0dfd7c9b6e09bf007c8f9f11f17a85697a1854859057ba317518
Signature (Ed25519, base64)
/hxqw6j/hNYRE4Yz6L3uc2V7ApQXufaWo1A/c98eGKjPlQDgSCXIkX/F1MRulyYis6/Wbz1cFJlqTvjkKTThDQ==
Merkle root
f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7
Merkle path
["4bf142353ccb995237695ad102d454c811c517924d7aa5f9528d303602581b09","d7909cd6c0a5adb27bb4ba77390a6d1157a3d35af9afbc7bd4bc99efab81f02b","3b593c6cfca415f70214534d63f0c7e117522fd092af5c70db53684416af65cb","cf18a5dfe566105e98b4f6c1f57b5f953ff24346ffdf6fdfaf1056756ac19154","b08836b3f22b101f6718283e6cac481bfc236d5536e8e9fa468b0cdb3af3fa3e","e542f0ffd345a5925a16369b3341eba33dca7a97a597684483efa22350fb7170","8e400a9cc71326ee0545cb00b225a2313b8516eb755a5da1a8d10b1083cd5ae5","5f13d6213bbd0cdbbd8a7f18c7c6512effbae47eec82a8d24f84e64227cdb030","9868ab421311a6c50eb2928d78424c069dcb8fdb1f5aea76f095038054eaf10a","94139afc2fba777ca306fb29f19492a5b5524a0649c15d92d679699d9b0f1835","5253f06534080ae2ee847aecb72e5282fcc76a86a067646a31646b2ece1f2670","cb6f5361d0bdfc2f067bec39754c3cc2773873266c01703278fd62fdd7b9208e","46c87f9a08f1f246fdfec5275340122c6fc82f05348c2147438d88f4190e91a4","2e5c89ae9ab7dbc565d9c1cf67eadb6709ebdf774f99038c61564ed1fae236de","e9f01260bd0385751f2505473f49304ca5856588aee517e499b7a694c94e66cd"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…
Expected log hash
083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791172602574","kind":"published-quote","locale":"en","page":"brand:zasta","quote":"Had a great experience","rating":5,"review_date":"2026-09-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.