Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It was super quick and easy”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3096409536

Proof data

Record hash (SHA-256)

9f7ac5165fe3fa2414dd232e31ba8931bdb9d202ef35fe5de9943bf1615bf07b

Signature (Ed25519, base64)

jDo1JPt/s77iJq7WCN9Cjqpy6cVzaXFcbEcfsjFZBIepKd6p2qtIThOQq4Wsz1GVWAfKKS+7r0q6KnwUAuYIBA==

Merkle root

a249ea91ed6d494b0d321c9d53d89a7bb9616ff6f558eb56f9ac9b7e3eba088a

Merkle path

["9f77ed0624999e3b9023ea2ec52ba9bbb6ce06437dfe98dbb70aee46289c735a","86b303855e6d8411f3d0c7770befe8f5ba5b3384167538543fdb0813214ebaf7","6d5e37e2ca8c1fce8bb3329a6220975ef755295a562b5f6e2b334351a65f1bcd","7db4cf54470dab1aa2b7b1b7373fecfdadc3db49faadd41e2a0864026cb44506","fa95858947a01b89c6bd6f445182c69861426e678466a14fc20e694473ffab3b","9966a2c9eb89bad435b6431e0684ee8dd1c21c2d438b5bd98a4807be8faad43f","ddadecd23cfd0b182c0a5bc18634fb2bdef89e331d640227e40952c576bae3df","4255fc90d1162dfa43f6fd413f4e777a9d343fc31ad2e93defb9b67631705317","5a59cc9f54c99230aed4f4c4db70a68176f411846c05833c2b9c8a3a95049ee7","6908154953fcac5c2d9338741af768fa75e893a0aa6ff5dd21d578a2661741b3","41ef926cad2d49bbd8b8c8f0275c41f69ffe670bd2a21150a5c05b57d4744d8a","92210fb9d36643953cf9c005f0e102a7ce467a1ff8886413080e820d32f487a3","6d4e0aaa1218c63e05670159d9ab730a2774327d59be1c89fcf07511e0ded3e2","6f5950090de794fb9a8ae3a7ab60079331b76ac93dec1ecf10ae185636fd9411","c7ac6cb920cf1e460ae014f9f7e09e7fc4988adc232ef0b46ecc1420eaa09987"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3096409536 · entry 108e9186e8c5677ab1e1…

Expected log hash

f1740c5ce7036e4f36513fb4ccb4f6bf95b5dc879a1fb8a1f0778ef42370576f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791238940340","kind":"published-quote","locale":"en","page":"theme:zasta/ordering/en","quote":"It was super quick and easy","rating":5,"review_date":"2026-09-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a249ea91ed6d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.