Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“who couldn't spare 10 minutes to verify my data in time”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
91055f8e7f93a83d76673194e60102e6aaccff43cbdab021a257ade582372fba
Signature (Ed25519, base64)
hb+o2xreY30BzOnHOBVcLw3D8KV/dU7gdXE/q9Zbg8hNgCkkpiGiI9NWU+BwBNkesAoVU5XeYHyN7MQysrXrDQ==
Merkle root
a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c
Merkle path
["910a0490c5856e4c7d90af45d23e104103b6792d59a7219012e99952ed037cca","a0a6a26a4819f2613f6ecb04f267a740f33cd43b0ffbe398305240836aee5f8c","d64767e95f475f53276ea7d64ebd8b13a8ba87dad1cff7773e59b93360ed3195","5502258ab1662ad400deadb29d9b0b2a8b35a887e8632816ee2e6e5ad19925ea","7c8108030c60a7ffcb87c8cc5b42edf30af0337e2ff56c890de0c9d280911b7d","f4f6cdcc1cda29a2e0624068a104611a6f8d8d1183e34724db2ea4c61415d366","1ae45fc4077fbf82b2f76ccb606a5cccbd8d62f75699f3557d6261e01b117b2e","cd69252d857e2f6f8cecdc356c7832416b7e0150e3257c1ae01811d3569f7a28","82601a9b26fca3e852a2346848fdca940be7a9e0eab51795a519912b4f099e22","64380d159908d7e5d6a4f2660e198577fb7f6cc041867ecec19d1a00c61c2361","4792b68a1efd37c2efe0d2ffc63092078c0aad9738a91c23701d505683d089a3","650569b6d36872ec607d21e90b70105894b45e1eba915a8d7588d829e1115e8c","d116928dd89f0a9ea13414b0fe2d577ce3dd16007ed8754e9f46163a67e25fa0","c2523440f419decfbfbb1761ac468558734f6da135e5a329b4c6dba0ae899966","5153df72155ae00831ba1e4416296382c39280ea82c989972042c066f445006a"]
Anchored
2026-09-18
Public log entry
search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…
Expected log hash
5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789619628558","kind":"published-quote","locale":"en","page":"theme:taxfix/service/en","quote":"who couldn't spare 10 minutes to verify my data in time","rating":1,"review_date":"2026-09-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.