Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I got my refund.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
9474d392b4da8ded1ec3fbc185f538136a5f84bb7042213440e1a0081672f909
Signature (Ed25519, base64)
7EUBV4znxyVRZ5iBVFavTnafW27Yw/Vy8+aPVR1l3eo4a1sus8LI5kzNl9108LE5+ee43gLZnZSG5XYHhwf1Dg==
Merkle root
81db1abd6b6e636da393518bb64e907fa9c48581b44ac2be5a9e74d02608e451
Merkle path
["9482946213bec6fe227d609c21e61f4e18d30e0392816427681e94b6d1d1deb3","0424a30368e9ca6c6db3495b96f542002428e03783a4722e846e4cae4082d7e8","5f79c6555dbe0d76d891df6896fd2cd52166cf5db5561a5b0dbac0cc2fbe22d5","783614580c46a654047455d2b9ca9fe3146e77497926cd18a5bf3ab7fdc4162b","a6e99e266f8f826aa051509565f34a45b635a5c933efc660cdb2c1a067cfcde9","75237314d5d794bfcd7538f4c0334a9370ab4bf5cbcb7d5ff7057308bd52bc73","499e948912c82c90f36b6e03e3049ad15053e22adb705354ebffa2f7de99f641","314ebb9a4685d12aef1c4c1ebe302da42410386db5444d924f5bf449a637e310","b767661a501a90b1c6e6c440b3f90ea100e94490570fe2969fbda2d2f965348e","ca94b80146621e4263a72c73633e02135fe1a16abb8dc55a5c20aaf825808e1b","1a8747b07d7161eac7ca5f171f4d0665a57a3d91c239928f5b364567116fadfe","0fbe48c83f3a7fc54e0e6f6b760cf4208a99354beb22ae100be7dc95e97847da","9fcda85d8e37e19a15f376a43900980403d080527146762503d0fea51bd87692","6fa310e475466f0115dd6b7ba199f23e915f2a513e2610274356ac5bd367e940"]
Anchored
2026-10-14
Public log entry
search.sigstore.dev, log index 3248278454 · entry 108e9186e8c5677af67c…
Expected log hash
4dfbbd25ce402c4821f7e2d50b18e091e9a30465f45669967c545fb71910f358 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791948368672","kind":"published-quote","locale":"en","page":"brand:zasta","quote":"I got my refund.","rating":5,"review_date":"2026-09-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (81db1abd6b6e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.