Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Why have an app if it can't do anything other than send a push notification or press stop?”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4e8a395403459b128fd0dda10c1a376b2945a715946b14c7fc34ff4048359c4f
Signature (Ed25519, base64)
U5/e44p2E9wcBvkP6i+pjCfr3J2okPRr3ko1rL8fhx/LSMaczVYwJ85UmPcLHGEynr6MZdOyzXuuNEDW8W2AAA==
Merkle root
e299bf38720a5a91bdf63bbc0205245bccdf3432ab1652c69342549658b7a9ef
Merkle path
["4e8a4ea19a5349c69abc049d84e9a4e5b6dc06ef2ac0b10a7c14bc0b6d8169f3","1a029b322929c2868aac1000ad2f304f7283b635e06a4ff1afb979696059746e","ebdc69bd0fdeb9166f18b457ec1dd3c81318253b646bcb306e1a27942a145f83","fbb3af9ee044a7e08cf89a358dd2ea0e734eb6b16ae449137c11b65449f18b67","14251f1b8ecc14b0cc6a7478e354f117ae8415c9cf4109cd2bead07230016a2b","9adbb5f82909f80103a5096587fee68cb61332992bc42ec8de89eb14266551cc","3801c4804eb1936463d0b932e778e04aa97fa82a757a403d3476787ce4a2b6c5","e03f456cfa5bacb6a30827abad8ad055e2f5d96eeb22661e2df9f5d31d45b74a","c7b7d704f693b2657b58cacc8ba618c08cb2484a4bd977bc0c0fffcd69643598","d9599ab879028c26e08d23dec2e09a981d72986faefbd6ae3591cf55338ea3b2","057db33d4b111314407fa33fce072040faac3e5b276da3d649fda548f99556c4","44c08976ee58b5cb058f11ca9229b8780c4a6cf8c64bbcf43373011c4a37225b","ac995c9ae640659c6b258d62d0cad1933912ca122fd33d27f90560dfd3199a84","aa4bbeb87247c2797626ab02a549451da6dfce4dcb854a36fdcc601e3e788772","bce5d442c07de6307e5ea8947098e74ce88c2246eda5e5fc1015a6d7519228a8"]
Anchored
2026-09-21
Public log entry
search.sigstore.dev, log index 2904877428 · entry 108e9186e8c5677ab408…
Expected log hash
d020708737f55ccdf49203f373fcbcefe8158cc388605556fbfda3c365de7360 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789881486272","kind":"published-quote","locale":"en","page":"theme:v-zug/service/en","quote":"Why have an app if it can't do anything other than send a push notification or press stop?","rating":1,"review_date":"2026-02-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e299bf38720a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.