Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I had to be the one to tell them that I would get more money back with a single assessment.”
Google Play · 1/5 · 2026-08-14

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3220562278

Proof data

Record hash (SHA-256): 53d7a323d5877e61d117192722ada7ef5027a5bee37341b20543826b7600bcc0
Signature (Ed25519, base64): x8HPLkFY6qP5Rxu7f7BYEtXPhVZNk4uqcS5h2K52/26EXzLVUW1C6+I/Ee++i9Zkohmlzt2ZETp7mZ5CfHfFBA==
Merkle root: 2d214bb14438515f4bedf5edd9b00a6a5113a016ba9b9fe8160d41d7e6046722
Merkle path: ["53cc4783fdcb6f5a8dcc92730b7b92ac4ff12ad4171f116ad894727be51d3f6b","40202e8befe61adcc096c41a17b71a18e3bee20b1faf019b5f36468c87c12b54","2064764a5f7bedf802f050a2d40ebcf4a68cf2d7dab3e916327e2aaf06610f79","a4b49034ccbd81e96641adcfa9b20ee8ae0e338986aea728e09b4b686b4be094","5f68cb1fff8913f168529811088450fe237c5831098bb663751faff9b6688377","75f0dfb58d6f41a88b3c4e8f747b93196e49b0e51641d908abc4c580190ed6c6","c3a9e4131c3f57596769e6f309e2632ce81bfa6f11aaf70de70d76866ad8f73b","b73142656336a715652543d4b31d11a487f09d61a5fce380b4a07d6d52163656","a0aabc2a413997a3df0a8f071aa546d7ec1c0c0e00674b90008e3d9fe310439a","5a7e4e1a963dbccd6dd1255a198cef96d5695bc0e8e7231eff36c8b88b0ff339","99018faa5ad0d28664cdf895a0d291f9e9325e68283ffe73dba89bb27fc962ba","23123a46a6d30e0fa59a691fbe1dcdcf32ad32c111bb8e37438ac91b1152017e","184cc1e2f93da59337f7837161587a67303bd364329773d15b922bec0848e3b3","35ea2df06612b261a549235c4e62b3e1ad1789f05da56f9ca671421e5071b72b"]
Anchored: 2026-10-12
Public log entry: search.sigstore.dev, log index 3220562278 · entry 108e9186e8c5677a2753…
Expected log hash: 13907aa3d3da271016c4b5e75946c4440692c6b4e1684187b965dbb983b157f7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791777669660","kind":"published-quote","locale":"en","page":"theme:taxfix/quality/en","quote":"I had to be the one to tell them that I would get more money back with a single assessment.","rating":1,"review_date":"2026-08-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2d214bb14438…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.