Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“but then it was fast and uncomplicated”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3139760477

Proof data

Record hash (SHA-256)

7738db8eba9af8e848622387c3bd592f8c4fb5e5ed6b590a5e2a749ac82e8439

Signature (Ed25519, base64)

bRiQpfw+s1/wvdKqW4OhJZe6cE6hZQwCzt4Z0+AwyYydvgfwyF/1WbLG+VywV9uQIq+75cTE29OUJVkg5K2wBA==

Merkle root

49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2

Merkle path

["7738452aaee2b701de4aa41578c2bab1fccba18b02993374224082b3e7742642","1a2988c24b70e0fc75db8a154376969fc38b50ea689d4f703d0970dc1d761103","f6099383895f8aa7856dd3190a0e16261db786712c38ebcfd670e166af7927ef","c8ab1938b8a2440427d6e442311d0daf278ebfd4516eb38e5f056d4833b47a03","e9966dcbfa564ad096950da577e4c11ced53ca80306e815c20512befe15659d3","da99a4d4cd9ec82d4ca53fa8ccbbfeaf40038c79d89c16b67b16c0726e0645e3","ed16a3babe41d9a180dea0196eeb430c26b3cac6f11c949e62d90d5eef091f0b","c0381583d4ef0bc6b07bc65b1b1a8a6b9ca3a84c72817d7a237c36afaa560e03","0db32cc0c368398fe3c846776778ed24416a28d02a1a4fbc97ed3179217972a3","bac191a6a63935394534e8af8b032a054cba85006ae4cc5a6180f2bbfe9f7d08","e8352b08697a89bc5882b4f6f02db1d3b67b01405da4a821574952588c930ed8","79b266fef4387a3eb13229ded49c020294637e97bbdb14afb5838386f7a6d53e","111d2d0cd89c2d53981ba81e6a10a0e3f8f1be927d4be6d99e4f29e2d9c3ae52","541a456de48928931fac4c28e56562983bd2f8cd0c9306116286df2e2f1c9422","d81f506ca96dea712a8b56759200b270fc625cf496d323ded3475eaafeb2d916"]

Anchored

2026-10-08

Public log entry

search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…

Expected log hash

d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791428432986","kind":"published-quote","locale":"en","page":"theme:taxfix/delivery/en","quote":"but then it was fast and uncomplicated","rating":5,"review_date":"2026-07-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.