Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Worked perfectly!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2882354328

Proof data

Record hash (SHA-256)

922cd938374cb4cbc70a03d71debc8c1a863c4461da2be05f4da89649e6387b5

Signature (Ed25519, base64)

IfOMbKBm6CXGk2Od/l+k6HR7Z5YJdsUWnsx/3JPp0CqN4uksRJQDcH4WLBCpBX69xYzIkL/qroW3O0xgrZfdBg==

Merkle root

a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c

Merkle path

["922b9ac3b058548f559b4a23628a3890046985131b8a35ac0b0ebc05ac7a96f4","67e6fa2dd9359a68fcb1ec341d3bf1c50d3b2b09d8b4546069181b221c3aa966","0ab2aae901fa23d2acf767e8c12bf626d7aa49b1a0cfcf83ca269a7633e8b357","4ed1eea8baa2be91c73522673338a1ff1c486c51fbb01fd7e4d79e88b4ef5b8f","bb761d400bd04f46cc94d6d851a9a534217b1e483c9ffc73cd50586a05370790","507bd28963a33712bfc328872a57ae29b3cf46e0a3a58f1e56a03d2a94d166f7","a7244eb983981c9f03fa93e9e36b8468883582d7e82b9b95b5b07a066b97c3d3","fd02976f1eeeb45a7181e54e047cd9671448168ccb9e9a2209305a36e2ecd377","82601a9b26fca3e852a2346848fdca940be7a9e0eab51795a519912b4f099e22","64380d159908d7e5d6a4f2660e198577fb7f6cc041867ecec19d1a00c61c2361","4792b68a1efd37c2efe0d2ffc63092078c0aad9738a91c23701d505683d089a3","650569b6d36872ec607d21e90b70105894b45e1eba915a8d7588d829e1115e8c","d116928dd89f0a9ea13414b0fe2d577ce3dd16007ed8754e9f46163a67e25fa0","c2523440f419decfbfbb1761ac468558734f6da135e5a329b4c6dba0ae899966","5153df72155ae00831ba1e4416296382c39280ea82c989972042c066f445006a"]

Anchored

2026-09-18

Public log entry

search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…

Expected log hash

5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789619628558","kind":"published-quote","locale":"en","page":"theme:taxfix/quality/en","quote":"Worked perfectly!","rating":4,"review_date":"2026-08-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.