Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Whenever I had questions, I received an immediate reply”
Google Play · 5/5 · 2026-09-01

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3273053873

Proof data

Record hash (SHA-256): 5eee805d2f6199a9dfe67d7add9e719a9b4730afc5c8086a8db5ee198ea7cb81
Signature (Ed25519, base64): 2wSE8shTtCz0izO0pbiRUCGYcuWfzmmn4zz8QBQpOQqfn/njWP/iGB4OjfLWjqXbYBEKIZ2jKnlp0OK3IcOKCg==
Merkle root: 6953a5ba9bd00082fa1986982a5979aa7ad5b4654ec368f8d247f13243e4e4b8
Merkle path: ["5eec93d7b37cebc857acf75488bf503c59d78d1e85f047fc87ae643eb25d84af","9ecc43b795a85091e5cc85763b66271757072a4c3fa66809084f3c3029233685","1230db1871437908c96a281c34ddd8e00804c268e084151e99b8c09fb6a654fa","f3acf071723c23367f2d1767d2e3facdd5027bd994a4f39f74236728fb46d377","9be10f4e4a0a08395f369ab16c93bc60ea16fcbcfdb2e0cf30253e11fd6998d8","8b42906c6e029679aafab43c073e1c60611ea2bd502e617bed2c4ef7e48dfb8e","7e45a6f29adf82dddd04efb0e2464971b29999f1144022e31a0cdce12f6e1e97","fdc655e052e3f3d887bf80d4fd14ae88ea5e0f8b02ba9c0ad6d5503d355ff867","bdc4c783c86de8d53b7371b9034f7ea5731388bc1556a10c75c789d25c9dcd21","352b8d5b9489bc0909e5fa57513d253a198781020980c1d0e3c8750da3a9ae4c","2a98c90af67480f4585f64bb5f74f1cbd21dee5af23b3b08ca69e20faf615211","4712a5b33b6ff50d50cb0d169be1d0e243fc91c6e42666afbd10d27e6febb385","3d6624c631c3f201b337a52bc4f9494c99366c0aa74b4db152cef1b6807b4800","98a14e6f55278d0c3f64d31e6bb09545a033fdb7dd6455363be23426eb85b044"]
Anchored: 2026-10-16
Public log entry: search.sigstore.dev, log index 3273053873 · entry 108e9186e8c5677adb5c…
Expected log hash: 8e660c0f9c2f4acb2461077e20036379bc945573437a296969373758a8dbffb8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1792120102008","kind":"published-quote","locale":"en","page":"brand:taxfix","quote":"Whenever I had questions, I received an immediate reply","rating":5,"review_date":"2026-09-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6953a5ba9bd0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.