Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I just added this company as my payment processor”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
610794f71b71df0dd11f4f79e12240e8100898683acc6e401d19d088c3efb95c
Signature (Ed25519, base64)
qt1Cv+PJaoDkX4e/wKaZ8l1lzUf/jvqIrGrdOGY1+ob1yEboe20zoszxzIyOxTtDEaKnzJUO+F9JyLO6VfLTAw==
Merkle root
eee462924587f8024361bc8d60043805cf5210f8bd2ef7667df06d093552f9e6
Merkle path
["610503759370cb198575a04cc08be3369c417abfd7ba8132bf11cf3edd1e4af8","3369d7012e846e1df122e037f5663a6599e00903d49c2ff6a235d2443c3d81a3","55508722aed80dde5165b0f91d30596259ce5a5b247a1ff3a272ed2f003625e9","2ced009c96cfbc20ceefb1b0973e1fb07021af1c19a0249abfe6a729b55db0ac","9edb13c2e1c8a670a57b85d54f395b740b9c69d424f17793cc892a9509e52511","c887311d0f6d7e9ee1ed09a0cb9ff3ce85e221487d7852a35ffcf8e2fcfb62e7","54476c9dbba14a1979fd80534f6eb71fc1496e689a8a7cfa1990de3330cb8dee","e384a8ac11cb55d0dc8516a72c929b63c91e710cc2b71d1cb271793ca14bb4e9","599943ec95b85834ecd65405a7930fa7e203f10211471c8954ebd15d9b23569d","b37f2ff807fb8148ea7c5a55ee959a0b8d28ace1565b6326ddf364f3374fbda3","5fe4503b3307f13de42c732826bc151cd940707824ee79beda6f9ffa1d08a4b4","5b1894dfcb750cb74de963040bda8c5d7aae8b006db7bf1f2400cd4c8a13bad1","2a2a0e0a04556444a1f3e56af70f8f7d735501b2d557278ab2ea5948d291f4ab","a445a39a48770a8fbc5d87a405ed660d401fa810eac6fbd1d284a96f8c7d5503","452f4fcbca19997a15e6a6869c50e026ff02cb90a6ef21da106ee0457e55941a"]
Anchored
2026-10-10
Public log entry
search.sigstore.dev, log index 3178600936 · entry 108e9186e8c5677a6a91…
Expected log hash
f3dccf508afcb5e89d56dabc8c5aead85de215b1b896d057d463ea1c1bdb13a3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791606586319","kind":"published-quote","locale":"en","page":"brand:wave","quote":"I just added this company as my payment processor","rating":5,"review_date":"2026-05-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.waveapps.sales","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (eee462924587…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.