Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“they took 2 months to prepare the return”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3162293789

Proof data

Record hash (SHA-256)

54d065a86a8a1ac532f0dcf4a83786e3076c45d53691613d97e36b08297fe3a6

Signature (Ed25519, base64)

d57yBSbu/usyzAPLQZDi4U4Bz6qZLoEC8uOkxHUPb3CvVuOe1Zt8VMlFa5K7BgukSrrpgyADXr6NnsoYH6wHCw==

Merkle root

ab8d4de5853e13d360962f03dfb915842a42e1c5601cdaac4f2b37ad0ba96b78

Merkle path

["54cf0ea2c59dfa6c01aaebed47a013542b785e62bcff395b49417d46202c6e61","5907530e35b94d8237d4c481342ef5300573bbda2b4b93fd455e7e9be82729f8","0885421e8272a9b2a0b9e533a00b93ff9ecb8c94996076d1028d2474ad3969bf","30149f6869818849a85f7bdbae92c34988f996cc550af8d10fbe46b738e32cdd","6256a9005e9ec72fcb5db74d8f47ac6607c405ee65685500c0fc0555f7f2ff90","37b0dbd4c4349284f934b3141327f1c57893759c242e9679772d25fa734770fd","99e1f5e6d02b7789779a77a184e9ed678a2fe7a0c90cde410e2a16c97ff6a3ea","6e29ed07c45a88e085f2f95617cf44bb4227a981647974741028fffb3de0a95a","3766c0dcecd27c698a8f2f53eca24d00305f667c4eff95fd15d96f1f33cde957","101eb32127f5bfae798ce74395ccdd69f6545c13132f9c2f7a3cbbc385cd1997","b69c98d392ac9d0eb1abb0b304b01ab22427d4f334e62b6afbfc0d64154faa70","9117cd443e8e35ddb6557f7c106c595f6f6d2c6399cc84597fa079aec9f64c80","145b8339a2152137a5c533b9fee0b743027ca75044265351c444699ba891d42f","6b7938d0463f2b633e195d7021170023360849e40ff5e64ffe0633d28e084f81","90ac6c76618b09f3702b50a6410c80828bbcb4ead0d9d85dda294a654717f483"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3162293789 · entry 108e9186e8c5677af0ef…

Expected log hash

49c1b9c7cf9c0180248092c94f6cb48d5e59f6c65f471decaa61f120e90874ce The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791539611981","kind":"published-quote","locale":"en","page":"theme:taxfix/returns/en","quote":"they took 2 months to prepare the return","rating":1,"review_date":"2025-09-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ab8d4de5853e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.