Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I did it via the consultation feature in the app.”
Google Play · 5/5 · 2026-09-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3162767972

Proof data

Record hash (SHA-256): 7214d5278247a3b9c14b76b70e95150f07d84dc49a9ccc4a62fe638416175dea
Signature (Ed25519, base64): hNyuqpEZ78J9bYb+u1OKDI+78e60U7H1DOFzbIYPyXxB3L9L9miXYbJQgFTZWHjEG8sjxSjWBDt/yibUc5wBAw==
Merkle root: ea9653d48be6468e8b38c47d968f49528ccd17e229f6df41b5fdcfc232720ce1
Merkle path: ["720fdddda3230465a614fe4c2fbb70ceb75ecd9c1ef18c6486d40a24173d4571","9d41fdd5695539b7a7f596a4295d9b804b2ef9aebe00872e5cd0f250014ba2cb","e58323c9b4c7920781ca6ad4069571ec6826afa8cfcb8ad6cb8bfb5cc14582fd","e49295cf8e28c9a9f45fe1efb7efe33242fac2da0e81ab14fa58469d494cb468","66657e70859248388caa912accaa6ecd1101b34782ea70a801275efb5e6c9e3b","672cd86a95e373ae092b6edd7d4fbab17256042619008cfdbcd42dabaad5e274","2c17af66dac980dc500def40b0c52c5b26d2621d379ff7e37565b72858d4aad8","ba18a1de13ced7a87309c9f1c2fbd09c2484953a633b833ab2aa41aa52db5b72","972ea52face78130c248d21a7856ef35e44a358f1b6a24c19b3a1376044a19ae","d5b1ba4965e911582e271b6015e8fc44964a0abfe20129845ed480858fa67a30","334d49369213e9244f201ffef3959da35daa0b296d13b3c90744c894f8701267","182421c42f44dd31e48e89ae9fe9f4260b76d70180e539225768fd2a073069b6","ccf8ff30a3103bcff522ac20eeb7c8bafaced0c8bb22a4b473e821c1f5835c20","941e58bbc56b1efe09a1b494813fe84c02af0a34c4d123d9b4a10e3358002128","142248530d485121153c09b780e08c6af592fdb4c333042d3cdd9e4160c6db55"]
Anchored: 2026-10-09
Public log entry: search.sigstore.dev, log index 3162767972 · entry 108e9186e8c5677a40b3…
Expected log hash: ea8f60b663262eef5ec0ce5a9fbc0ace913092ea47c37bdc70ac392578ea0c35 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791541525227","kind":"published-quote","locale":"en","page":"theme:taxfix/ordering/en","quote":"I did it via the consultation feature in the app.","rating":5,"review_date":"2026-09-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ea9653d48be6…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.