Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is useless.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a303d2f4593fb68958e268a1cad9a1b78d5a4af8bb570ebb014c2209b08422f8
Signature (Ed25519, base64)
5eolBpdwVj/Md41utlymRVi1ofWu5HUVWdYMmQoti4w9Dnngc/E5pC2iwQVNyB/rWMoIXh8LF5ptsC/aIn2WBw==
Merkle root
9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path
["a303acbe56b1f9a800e1f44516dcc98af56afd0af6f392d86e677586f496fd46","065114e7803a3be3680bb108ac97e185150f873b14791d0ecee594f3c80bcd10","135b1a3ec72066e5328c0e8a01d116539b2b6118dc18349a65dd067288b51c1f","45d5c985f348050615eac3b0eba79b7e2ad7a236d20e8a7e5efa9890c3724777","724fbccec9f8a52f8507495eb434d4ede3e941361f8415391bacf74358d9e8f6","9e9a0999ee46efcdc282d1c101b5121ab32631be3c13a186ce5dc4db9e78a996","f71df7f61431d5fbdfffe201af1115af45e8bb1dcf9be7dafc4d82770de1d054","fa63193c41d51ba792c944d77ca855dca6056f8cbc5f71c8364da6f4679a8a5d","4eebf467b9ccce5afcd26c9e8bb7cf157b0049b981d57ac0485adc4cd7ee60af","a3f9e0cf6ecc74d5f989034d75249f2d71a0e6e05de979be8f4754b09bb8fc96","121d657ae6db0ff8abf7c2188c475a5152b01d1e87f591a5298e7cdb43842c85","de0f60dd068052157c151137dc6a24b405741c1aab9021fefcd812b0fd718bb2","96c428d1cee50e03e146946ba689eb8a8490e1ae9146623bb80e6375bb0c470c","11d17cca86f438a5389c208279682b74cdf5ec6a6259c14178c9835300e88c85","f45a93d3e59c239d4f09cc624fafca5e2dd2db35bf5cc0cd1f1d28ecf6819cc0"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash
a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"brand:v-zug","quote":"The app is useless.","rating":1,"review_date":"2026-04-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.