Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“never any problems”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3240231023

Proof data

Record hash (SHA-256)

5d8ea18d5681810b51ed984068724b0a3724baa1a8abb6425d2eef80d2f64ac7

Signature (Ed25519, base64)

D/leYlPdpZ2Km0MgPkTQTAQ8goYJPSyklWdMWKhBYmuRU2droK/UUMORtTiWlAXunBmZw++dJ7brnfWitV2OCg==

Merkle root

888a38c73939ec95e6f226dbfb3637325026fcafc5a795aa4e227b811d6b2c84

Merkle path

["5d908dc718d4b054660a3ad21828a8359baf97a28c2bc42cb18e338a9d98b3d0","4da0eb8891987b2ac02c90144c48c0c646ec505afd0f4753b49a83c67875e61f","7ce29c69c0127b2fbf3c7ea34a86b5f078a2b69ac75b71aedacad6f40147b68d","3d7e3e384d4c58c6843ab34072c4983968ff87f4dafc2ed672d10164b03e2ad3","6a35f9074da00ad4f5a6ee8549d45b6a5a74b8dc4034e0403bf6aa25cbab4b77","93b168dc59bd542446ad0ef5a60bcd34328bc84b3392be18ae7cf9187030510f","34f017001a8e91d6bdfbb7b169b25650878ef14aa664611e3c1da7d3305617fb","b89e842c250340b777dd2cb63faa7e75143b6f1ba1bd88cbcbf1603f1d496cd6","cb149fb1bf37da5a325c9a411988ee9d88b2df86e763feaf313448f5b494c15d","f752961a9b7470e3d656b68aed588e605636e427ffb4a28f74067ad3d60b3ca1","dccb3ef893f023e5d3a169a433d7e47473e23751a12ff4650c7265b0155f4c73","7679ef7762a2f2264918aefaef827758b32914a11d7fe90e91135a7bccfb5f67","e914982b1091e825c1b1eed272fcd3bb043d32154d866d3ead686c2cb77bc78a","f46648ad2fd9f2769b9fc0ba1c434d2040de67cbd8b7a61df7b7575cd5a9206a"]

Anchored

2026-10-13

Public log entry

search.sigstore.dev, log index 3240231023 · entry 108e9186e8c5677ac0ab…

Expected log hash

bc440cd3136178aee800fe49b9cf2e319542a645c9abbb8553c6ae1e354ce201 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791860805798","kind":"published-quote","locale":"en","page":"brand:concordia","quote":"never any problems","rating":5,"review_date":"2026-09-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.concordia.myconcordia","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (888a38c73939…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.