Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I am logged out every time I open the app.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3668758047

Proof data

Record hash (SHA-256)

5c75c8430d434bee8a5e8ecdd7c3f4b0c69de84c8843eb0ea1c1551b7bd0b3a6

Signature (Ed25519, base64)

+f9WY5Mx67urCXsHiacTcCr6mLrT7v9YytYqLpklNWP2UI2jqH53qgn4GXs9UVKi9duXJCu+E39sgA5n2VzqCA==

Merkle root

91ac4838fb4692cf2c714cf22417014bde85e9d7b2ac488478d7f5ddac3886a3

Merkle path

["5c6c898b9535ea49c3127e53b7d6d65109063d721160de323b49daf8e4721013","46cafd60b5fb3fbc9e50bfed87f4071e6fc28f817c000dd8bba7b0a2dc623f90","202cb9e24b5b9380d8a6edfee99fdebedc26a23e140aebb3d454a42f13266dcc","da2cd1fe86bb190ae086b971156afab414f559e42b12690c3d571dd4980f4728","5f2fa56942d71a362b49ef488ad06d29fc022ae1f41c2f21b6eee009b69865f5","39c4c1c3a15aefd089d67fc5cf5f40730eeb98590325d5013e951a975dc3ca42","aadc65968d54845857bab639a49fe2b914af305a81ed92d4c116ae6c63d33827","284db5b9e48bef424b6924be1aef31ef6121a67b5a383be7b8005d38d48a0b04","0dcde61a2fabde4dce2fa448194ef0fd88939b62e963d98c69ebbdba95902c6f","0bcb1391abc7cdbe2e047f7c420ba15426d533fd34134d7e2bebd416f3fa955d","c1bbfe9555443fa982271533c900c0c104562b45b0ea1cf4618987067c5fe7e2","bad3dff19c68d5b77cd38fc662cdffb5dda7b0c2d1f0c59b7f7595bae13947a6","c3025b7778a1a77d581203e23f18baf3b8e43309007afd7c7abd033cbca39cbf"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3668758047 · entry 108e9186e8c5677ad50f…

Expected log hash

69940c768d826da6bb4ba0910028f48fdd278e42d608b1f11b1cf4d36c54ba55 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793706887256","kind":"published-quote","locale":"en","page":"brand:jobs-ch","quote":"I am logged out every time I open the app.","rating":1,"review_date":"2026-08-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.iAgentur.jobsCh","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (91ac4838fb46…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.