Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It won't start.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
99e20e50954e8fe6c61ac0e696289b4162bfa3b38632f0dde19bf84e29a09056
Signature (Ed25519, base64)
EjtEVRaaRQ641xrkgMOCHaOwOYA5yqR8si8GhOteaybD2tBxnAWIrzL79qvPZfkFAHDk5y78Aoi2c1mfUDMVDQ==
Merkle root
c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d
Merkle path
["99e281c5a4571887b1a0fb921be36b1d2519083db839ed8c61f8c7a19bdd88b4","c7dbeec961c4e7661112c80e5efbb5dec2ed75bcb6599b6097aade0dc0cd5065","a39ae6b47ffe94f4471ffd0b678f442d9e915c77a1ed53239eba4c22ccbf3e8e","28e9e8556c879ea5c1d71b1e7febf01331a1f50895d00963dcbd2535bc0ff571","5fd207e6b137760edcd17e20eea9362206ae23404aad38bd8ad82d9286a5225b","ee714affe9b8b6c12671c4546d3e87f91291a7fcce2cb4f74b8f34eef7ce0562","913155fe2668e47e93d142f60947ea95c4f408dab73d0b96bf2753de5754d62d","888e854f0c83ca5118711a9fa1d9b40dcb18fb6fe62003852862b3cb466a785b","fa00813f450eb05e9a3f010a1e215f847300e2606538a36d6b8bd8a7f81bc32f","9c1d96395f181584c3a1f86d6b8eafcb87d6156714c1442db5f669aaa42827ec","e3a2c33b9e947032b36a21d9f66d94a741072d32607fcd104d5367e7470deacc","61a7bbd58684db7aeeae7eefa5216c69a33eb017625b68c3e139cda5fa8fd78f","4795d13d6bf5f17d5468f644d3fe22d721bc2ec6d3fb73a43613e87939855d23","1616c16ecfa49e18821de7767bf3fa1e1a6fd3ec2fa090ad2f10f8770da252c6","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]
Anchored
2026-10-01
Public log entry
search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…
Expected log hash
38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790741815621","kind":"published-quote","locale":"en","page":"brand:v-zug","quote":"It won't start.","rating":1,"review_date":"2026-04-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.