Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've been waiting for the money for several weeks now”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
9d55e10df4ebb748d8a27c77142499e75297fe168145b855822982ed5382d4c5
Signature (Ed25519, base64)
h/06oTUvEwWjGMSf/FVEfr4+UWm9udiVPF4KKNG5yyIrWcjE7hTgII5cHo4MPg9ymdMo8EuiqP7e8pUEteDhBQ==
Merkle root
5397210619679ac63434abd334c13f5aaccbd1dd184ad9d8cac5ebeceaa346bd
Merkle path
["9d5857015c36333178f68208b0c3b8153b7cdaf144247356b13187e24d1c038d","83facafa0aac01574a6fab1da2752237e89493edcf57ef7171e4b21718bbd6fb","02dd12e8c83054280eb5616ea7ffb469b919318fbed0baec2e9a9ac9f12f0aa8","93a98b67338f474250bc9c3063d9c1f782ca06436d58d16d3088827a79f05079","52adf812e0a1b94f3cf7be87bfd61d7e559d3bac3ba184684127511e4f55aff0","c7fd678f98ea554f0012e4ee203c00d99b38f4505ad254da0fb6076b0ab49776","b352fed1ce072e3fb61191a2db69356d78b7c50567843726a2fc5231db17239c","e76ac1b1eabce203c5a213520b849f53f31637cbd36e29c286d84ac89ef860e7","0beab3cb31c3877bec6c8173e40d17e4891ba937114bbbc0fd1bf1e7298b393c","dca177411a9537fb9867b2458c4eac87716b13fe947964e7c0d468eda94cd89e","2714638b7147c0d0cb1673c1a0e1ee4b526ab6eb0fb98ab03c3875f7f112ec87","3a38d47949efc602ff6b616965b31e8678e49342630177cf4660e5e840948405","cf100015419b4e08a8d3e2de5cb23ad7a262130bd3e6bdcccfa47329e90a07c9","468adf75cd56eeaa89e39f50b974b405db9921529d680bbe88ff0d1caae6f316","77ebbc5a767f49a9f64068a716a8c843de0ea8d44adc624726bf46e2e415a41e"]
Anchored
2026-09-25
Public log entry
search.sigstore.dev, log index 2948162176 · entry 108e9186e8c5677a61d4…
Expected log hash
5ff8f25b7934b5d72d363d6805344624efba4d637f2c851f11783b259b9d81be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790226990092","kind":"published-quote","locale":"en","page":"theme:zasta/delivery/en","quote":"I've been waiting for the money for several weeks now","rating":1,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (539721061967…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.