Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Probably over 2 years old.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3667982630

Proof data

Record hash (SHA-256)

7a9cde4f4877fa65b963b2808f924a53f86239ae7e022fc8162ac2242b4fa060

Signature (Ed25519, base64)

mENy901pUBGvXTnC8uWkNgrn35IObe8SbzTFZcGFtcHPona/+isBGx//nvuceV7kgrUzrz1Zf5DMG4ypMhPKAg==

Merkle root

d73d08690811c81c8d5fad65324be4693c01a2aca1755d426ed86660151bff23

Merkle path

["7aa162217a480c0207da6a38fa665d73c2e540802c0be99a028012d5d5687f4e","630903739bd974d94d8318febc6aafb19b247f1d6f27cf737706d4f31124456f","60f9adb372eb9974ba8c86e197774b4818f67cbc3000fb1ec70e4695a558d643","447e6cd232e036c18233caa17cc938d73c3b62268efcc532af491ce877c0bd82","4bcfd4989e16e4d6767bd92dfe5ba4c037c6828326fbdc4b8aa0900053ff37b6","fbf788b8e45f604e330348d88e82d9930a2c8f1d7d0c5f249fa9ff9289db860d","e71c04b085ead21b7b8fbf10011ebebf6f31d76bd9dd5b296d37ca3bd93745be","9de50ac9de878275aacda42132a7fb2874302c333c87e4edc59d414728571819","42214b4197d516bb5583b33e906764091d2df9bdf7cfd2612ac1a3a329557c1a","36402e66c5651a1035a9b2f78314439b5c53f1ed4e136513a8d6b15ebd8cacd2","4ec75e2bd37ab13205fa9d537dad4f08d3e96be420b9315b5e1bab445f786b35","3102d5dd8b31c235025bda3caba3bbdbcdd19badda2913c0442c393516ef56c2","3fbfcefbe1233089f918cc9e7ac6d44fa339f7ccb302cd07cbcea4200db9889c"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3667982630 · entry 108e9186e8c5677a838f…

Expected log hash

5182f3d0ae634550e25d5f8f78d800f39fb338d1b74903dc2e1fe643547a5358 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793705160515","kind":"published-quote","locale":"en","page":"brand:anton-paar","quote":"Probably over 2 years old.","rating":1,"review_date":"2025-09-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.antonpaar.homebrew","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d73d08690811…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.