Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“amazing app to help for small business starters”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
588861e1b3729e583eb9b1907540bd52e22117f2a20705104e321c249a0003dd
Signature (Ed25519, base64)
WSnbBd6/erMv5dpaCXEcrXsCdVuChX/NEUsDVgg0tiNanijcBPOJ/PXsx2WxFu8CyCwPdzEBhziRF6cExnO/Bg==
Merkle root
eee462924587f8024361bc8d60043805cf5210f8bd2ef7667df06d093552f9e6
Merkle path
["58885b5efa86a3472a71410e00b4b34498a7ec7b3878051c0a7aae68ca2fbcf3","f7e6353581c7ea4e3079a0e4c3d850a38319c6e8343777c1482f49d39401f5f3","c1fb302275fe6a97d91af292dc95333cc7fab5444079459c9d4cee8655032286","157275690374d29a0bddcadf6498e960d24a3f04f6c63ca23c2921fe6762acfe","b01b4b645f12f7e90568932331f8fff7d74ff03ffb91f362c5bbdcaef1469ee9","d34e54d7057cb4be384f51a4c0a28b08a5dc934172b08e5175b76cd2a0e46302","039983aaea4a7eb1a99e886d1b8dbcad9df5d82dfbb771d488921714d5cdd056","c1c7e8e0b4e4bea6127ddfa627b82924d69116fe090d35bafe637fd4a06544fa","5e73dbd973f616a2c4639b7bf7c1d00c8b281d3da51465d7f138ead209f79c31","14d8c94fc2c1f683db94640bb14161805bf546c4851c89b6fc260f54ed29dab7","a272ea85631737531680457c069a82b977e8daa62af41dc864cba40b587da483","4379fefad16ae8ff2ba5706e6ae4b477d1b2ce3cfd6e873ab8243a37cd5eee04","2a2a0e0a04556444a1f3e56af70f8f7d735501b2d557278ab2ea5948d291f4ab","a445a39a48770a8fbc5d87a405ed660d401fa810eac6fbd1d284a96f8c7d5503","452f4fcbca19997a15e6a6869c50e026ff02cb90a6ef21da106ee0457e55941a"]
Anchored
2026-10-10
Public log entry
search.sigstore.dev, log index 3178600936 · entry 108e9186e8c5677a6a91…
Expected log hash
f3dccf508afcb5e89d56dabc8c5aead85de215b1b896d057d463ea1c1bdb13a3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791606586319","kind":"published-quote","locale":"en","page":"brand:wave","quote":"amazing app to help for small business starters","rating":5,"review_date":"2026-09-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.waveapps.sales","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (eee462924587…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.