Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Cannot skip sections if you don't have the information handy right now”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2929513415

Proof data

Record hash (SHA-256)

6d84b9bc91e5da8b7b168af370fec5b86ed25cb0d57fafbeb5cac07349ef0d4b

Signature (Ed25519, base64)

nAZAGEcbBbL5zy4gCPPgezq4IFzZmsXsQX4kVu1WfieE+xlPtanZx+m1Jt+dsXTLSKDmbfvEx9w4Jz9EjN/9CQ==

Merkle root

277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2

Merkle path

["6d86561b51d903e1a9ca010a8e7c6184e9f12a27dcf98a6c7ea729bceee11827","bae980208d5cfd80080c4afaa996111d0dc1d1388968cd0909705d8eac15f525","bc891cf819faa98cc56da56a680995df4d66da9f3db6cef07ed54ed718d45e50","2fbd0ae4e88032c285d7a781e1b95ea3a65bca8365572439a2c652d99d199d24","f146f036bfa416495bb0e13bc9c9006a3c2eed005ee07b17d03eac3a19ae5a1d","0811ed5fdbf8b48b4f1caa282e1d03b8de02650f4e88b49e783d8c4feedb9a0b","56dd7cd6b7ed4835150096392bf56e97fed223748de3be2934be860a22c57fa0","c853fa3c3f30fc85de42303f710b1454aae196740c27a62b768120adb3ca39f0","7a54a3c9225c3871f6f67546aba3a69b0bb9d731b28ad2f07116f8ff0547dc9a","66664e4c2cfb807395a38b101ac062377c6042d710f4ca987e92ffd8f81e420a","33184179e6410e1d4481a0c98464cf68c91e8de800a9099f0062b37c736d20d3","d6fdaa57e40c81a651fe32e650dbfc00fecab21e8ba71bc260c30dcaf2f68ca4","3a4557370606b510c9a2cb3a2ca3671efcf47160eb4264ac3eb8a4e9a9f5afbb","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]

Anchored

2026-09-24

Public log entry

search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…

Expected log hash

9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:taxfix/ordering/en","quote":"Cannot skip sections if you don't have the information handy right now","rating":4,"review_date":"2026-08-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.