Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Taxfix is not free”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
530819e8805e6f424c02d97ef993c48a7b2335ffe7f2ef432a8f9c6213ffcd29
Signature (Ed25519, base64)
Ad1cbxxF0RqXV2k3qJhdJH/oiWIsuqy2rr2Qd9oZyYxTfpvff0HqgP0LibgJFa04MD+SLvd8m2O1Y2gNbU/gBg==
Merkle root
d312d00ed6ab2beb6e18f20d8087ad3474eb8b04b26d5ad949e9237bf3ca4c52
Merkle path
["530935c2fece37cd926118750a66f9d358d36c732fb6f2b477ced1a2afa5b801","1a02d8d778d2678e6343722b4e2e948d8eed6038e3211bfb528c922633f154dc","2e00834c630380df68f7d8a497bc4d08d45e71f4f735009c16bc9ec5296958a7","1fbed0d197ac0c510152a8eeee2ddaa7143de40b4930c9311e723d0c7b001996","35809cc5b453cadcab08296a7fc30de411e415607c2b99c1a76f08e199800487","2a782f86f1e5c593d76d077a88c2b5c4eceabe9d86f9b37f79f028ab46538519","2ea43e2eee2af7546c7666e7a28ff292ac4638d464c12dc716523a3600ce166c","3df48d3c2588d9637e077e1ddfaab6316985e6311725071517b57bc0a6b9e8d4","8581bbf1ed4f226767a072290261ae9c455505f38e2b9ca332841b40f16bc709","e627f0f00027249f7539d23af8b135a7b3bd0e25e342bbc9a163a1539780a655","c2b9321de68c7e2004e2f9bd01e73aa2a0386c57f816121655c2cd1bbf6535fb","4c63202ac45e7de8817b3ca86ff6317680af50cb6ef4f2b2ef3e0c7496f3e318","d54e12ad25196f7df567d5e35a8d4808db0f8ccbe5c48a2fcb5439caaddf7c53","1b52c506e73c97f5d2cc9d574137c52cb370bf5407bebe9b32056b133838b1ec","2fe1a36eecbe6e65e0243c1a81f5f430e558c99de7c492361bda367e122fe03b"]
Anchored
2026-09-29
Public log entry
search.sigstore.dev, log index 2991846025 · entry 108e9186e8c5677a5f08…
Expected log hash
321e41cd200068478c5cf6f353f00dbd75153d3d8a640e241b1a6e8e4f8ac2ea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790574513694","kind":"published-quote","locale":"en","page":"theme:taxfix/price/en","quote":"Taxfix is not free","rating":1,"review_date":"2026-09-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d312d00ed6ab…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.