Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“a small refund”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3123908662

Proof data

Record hash (SHA-256)

547b603fa002ea25af5297b975cc299fb468e357d3ffae6f4e6f800d9298293e

Signature (Ed25519, base64)

OVrCMZM5dT2RTEJVCraqUUUZ10m3rB4FB1nOx7rRYhuZKVJP6I1D+KH8rRmCcdAdT47tHLen1jj9RkBTpkGCDA==

Merkle root

c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3

Merkle path

["5478e2f80b500df1e192fd0e4d4ee2206adb244b07ea5cdbc34ee1dd4ca2acef","d0c32fc32dfc45460cd7a027a241a6099c829104b52c412f4984e382dafb3506","86838ca22814da6ed0c41f77b00f402d0d6bf880094a68d56f01925296386801","3006fab29f0cfe6bcb3d7a02c0edd3a7da57da6524ff4f0dfbae1bb9598c2c80","3c1d882d6535735eff137c75413d53ce437d8ab31e2c132fb0417715442b0207","f83058bb24f06d3b7e9709209d8af1001eae7548174bfaea46c462aa6710e472","99d02a6d1ae28610c7097a13d4e7faaaa4beb9972a920ab626a8409e5f668679","2a97b41f57871d1c533cb0f87ac130869dcd30913806cb3b45712ff765cb4150","671fb5e08497f4a925337621706e9103ea00763a571d42248568d522711ba5c7","1300679ad544bc5b3915618a8ead00360b044820bcbd709af82e527234dd8bab","9d063fe3ff37715eef35862ee0dc102975c7f760f50b1f198349e6cdfbebd340","6541f7e491ea7acbb6ec495095f7e1523d66f60077e6c19576b7edc639e57b5a","fe401194a89b1a35c403a838c20d5686b9ad58181ce3567976f2ac8fa6a2f5af","4cd1a38cdfbd42b170e4929f839c7168ae4c49380e77ff0b1b146fb7e3e194bf","8308334b0715cdc2685afc133c95aa85c9b86c8dab9c8659092b74cf2783feda"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…

Expected log hash

5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791348381030","kind":"published-quote","locale":"en","page":"theme:taxfix/returns/en","quote":"a small refund","rating":1,"review_date":"2026-07-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.