Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It worked on the 10th try.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2907673729

Proof data

Record hash (SHA-256)

627e74b13428d977e712d0c5e17b9a16e0f3b54a75b1a7b903a34e9e80fcb08e

Signature (Ed25519, base64)

gBAFAPgwP3uooxwgRdfyBHxmnpeYksUccI2yO7kxnYmR7KswtSleW9kcM8qg7nDluCuiUpHA4tZ+e4E8ClZFDA==

Merkle root

b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02

Merkle path

["627de3dd86ac11374be58042886082cdfeb257474827896b14d2bbffff541ac8","bd2b720cb42b6439a602d66efee5e8a29a960315d5d18786cfd298ed5dbba474","b419ab6ce4d3d1d557c3604e497563a0a15b6916c6a8fc0243b6fd12ee7980d7","6744b525131ed787640de3ee1551647bbb752bf3f5e99a50e7bd0d4b02c7b651","49cf6dd5d05eb3c42f50af385c906bd734ea1e262d2a70c4c0aa22176e0082f6","26510f3275f7fdfee731a046b5e58ea2803e4d534b6d16707dee1f2659085750","8e195bea8b577b15bf1524d765e4324734b70a231d2aea86ace511a6b5e57822","39bb7d56e311ee7a6008d4fd3ad31608e5d8690071cfd08555f1d58c3168de99","d93df3b470d3c6513defcb78577996d500bc9b0bd933d07857275bc6b7f4c379","02e83066a2d417a6b11590ff406ecc0486b921ac6635497db9aec9ad8cd5c83b","3ffc4d7ca09b39e0b9dadb921b06581d3652d248d7ed39418b832cb86366bd66","40bd9581780e3da9ba474021971a27a2b963126bf33adecf2de39d29e5b5c2dc","bcc0d977b8ab2060a87584efe5d0f5545e840726716d3f02c248db108122259f","6c299608515c69a03540be35865f96ca4932f3e0403f8f39fb0e1c2e2aedffb4","43a562d6822dab12c673c1efa0a3171d1ef69b949f676fb01847e1e5b56274de"]

Anchored

2026-09-22

Public log entry

search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…

Expected log hash

bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789969984102","kind":"published-quote","locale":"en","page":"theme:v-zug/service/en","quote":"It worked on the 10th try.","rating":1,"review_date":"2025-03-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.