Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“responses to questions or uncertainties also take a long time”
Google Play · 2/5 · 2026-09-17

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3124210377

Proof data

Record hash (SHA-256): 54254d14d1a28c6f73b14d87eeca789277ef540da27edb8fd688336260e4efa6
Signature (Ed25519, base64): SJtgcsn0ptq4ILhyc2b98M5GENdlootpqxAOXAJELKrxAozPRtGISRT0IznAwVvlH/mIFQDd+lp4bF71JuWcCQ==
Merkle root: 3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path: ["5428eb349597f5b3f8dd1af3c9a5147c8891fa088964a6872c8d45b344b7878f","497be0e8eab04ff9b0b015ad2acf47b68882613f2e8e6a49e91931f3091c560d","6634f0f26d1c12f67d18c5f63fbc62f7c01a5552588ac01675dcae1a3e071078","120381dec1149bb72c360c191eac6419c550a9edea53c83e8bd59c5f0ae32de6","2a23b94763598204ba7274c004754b97731c48ad7e6d74b880860dda91ddd2ab","e431b82e444b20850e2f32a89fe283986d59ab310fee4d19ecc64ad32ba1a865","cbf7186aa3064ec6351b8b6de0ea443eefcfc4059ed10fed090efa940d4441fb","856a1963eccbe4f275b1ff61e95aa61ac19f58a39325de09c9af934ef7b696d8","aa73b968f3382377629f10ae21c29e57900fefcc1d460714f6cf3f1b896862f0","7340d8fe4f9e8e480e96b15a8371624fccf93f3494049eff6e9d43a4a6cfc8cf","5863c6abbf1bc56d61ade938e1d93c20025c09b6bbe5fc2e00df3bf236837f02","63eeb02103527ff931423915fd3ddf054d75db963f694a8be8357b62ce68484d","06d796a3b8e297c2eec8a6da440c9f9c6b9ce7c872dda1a86e5b18b3fde38aa0","faf75fd6bb73a751917db6b8d00819eae7e29d2bb6f9270942a28e0da8dab05b","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash: 20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"theme:zasta/communication/en","quote":"responses to questions or uncertainties also take a long time","rating":2,"review_date":"2026-09-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.