Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Excellent cloud service for small business”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
512407b5a19af90074dab42f89fd719c691bdb7844fbe572d3267f53f6fcc0c3
Signature (Ed25519, base64)
0pXUA++cfoR2RZcwtsV15Flx4MSj4e/5EWDbYf+f6L1r80+fKLskvG9CNWyaO/nV7jzHH3wt4rQ90xhx0mRyAA==
Merkle root
daceff63019f1382850c569367d5bdd590ed4595ede014f2eefb6ade2d806300
Merkle path
["511e153736ce9f6a3ea8e1d02dc73f24cf4240801c9c6b9851cfc4b12c183e5e","08c56cace95e2898c92be90ea36d29320f3291d4b83b631e6ff70e94e87fb25c","dcbf116703e6fc3e03e77208fd6b419fe348cdde75a8b65a32b7917b97f0331e","f36efa99c39be032f7436d718b8cb9df1c1b1fe5d66d798b9668b70fd72a1af5","0cedddc55909568af147022f2a6f9ea7f5c1db36c5f2b7527f47b12a32bd9630","2f144babe5c29c0fbd7eef942a9b263e07c9140c5a048f175549171272d08112","9ca559798e91ef200a686dbbb20293d4cec1ec20d1b971eaf3a537723b460a88","ff6cd5d9a630b3f276fd1f63def6f97b2d9783cb65318588f3f4fb73f3f320c8","f5b782f105a8de393f17e6110bd3281654685c9624a69910d16eb764f7defc98","1271205b45582c8659293c5f92ff4fc1bae56c4108fd7248cafbe90e7fcf12ef","5fe9e033c3ada07295db8def4a98ca364499e0aff0cac2b9af8dd20ae401f57e","b53f8c036e5931099eeb7cf0544639fa922972a87bdc0177d3e3a23896b0439f","a17be4b79bd2712b2b569bfdc513920b7b90954b5848cf344cabf6bb8fdfba8a","658530d1379fb6dfa08978b61c4f970b14d7010c6440325a1cfcdd219f217d90"]
Anchored
2026-08-13
Public log entry
search.sigstore.dev, log index 2444811071 · entry 108e9186e8c5677ae518…
Expected log hash
2aa059ff0634c0f19689b671a4618bfc73026ceba74535f0e877ac13568b88fd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786572717732","kind":"published-quote","locale":"en","page":"brand:pcloud","quote":"Excellent cloud service for small business","rating":5,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.pcloud.pcloud","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (daceff63019f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.