Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“easy to use”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3081733041

Proof data

Record hash (SHA-256)

a50d1e97897b1c1cbb0b31c630a47b7c7011294ddc5ff88014510e97936f901e

Signature (Ed25519, base64)

oEr9s2p5pDo3aXFsdRMQXmwdYmnfaWkxMTECidIxXMFD5ieKghPCVwdgJkZkwz+lxWE0E+mi8Xk9oiuo3YK7Bg==

Merkle root

c5671f9a997da9b293a79ebe58b20e4534ae608121169f15a5adc358d42ed147

Merkle path

["a50c1d1524ff6667bb1eb8bea864297d61ce6c23f649525262c810bcd8b443fd","248106b811a1fa25b57465d844e071cb67134d6c62b55e5cdc402812f219de4a","5977b2a7490f9a9d58db23eea1bc24a0d842a1d081fb8f4d81baa869e7eb1774","21ab5810f0a39cbc051f98aa4358907b7b28091e18c8ce7f86c7e87ac68808d6","c2ed5efdc8e4975637fc9081fa5a83322d950d5d22e1b4fc5632be5f5635cbd2","f9bf1760f0b4cb6ca50a3d7a941104d443c96e4ee6e751c34291bc69eb925e56","3d123916f9ac857118532be1b79aadb9c5f37cc859df328511259aec45e561a3","ca846e4cda8df41b738e62e1e260b7b79bd74fee5cb01af56c0a4459e06f7e92","8cd3e36ec63e0f45bdf0fd629e0a2fcb24706d987ae6bbda1b9f09902d870c5d","bd5739f7e548f6993cc06ee2b668e33687830e857c1b95d0dc4dc1499ea3ce0a","b78c2aa62c2e2b7188bb7bbb1aa7f3eb15e2404f0c03dd913847f677e44a0f68","d4e0ac5bb16de2a0916ce1799093995b7589dc34158aec1facf4c87e262e7fe2","d2482c8c27b9666d395774cc0539a6ae5a22798c7dcc665c13e5aa68bbcb3778","8621becbd314bf961e51e6037fd253dfa12e66cb7b2d1c68d51addc52321e8a9","b178a1b83338c84f1a44bf8fe330ca4b62fad9df75daa4f4e38c0d04e336f831"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3081733041 · entry 108e9186e8c5677a0bbb…

Expected log hash

88ab7ac46d4614551fa6e665889f054d7592b15d91016a45621b5c46a7ae8e2f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791174108170","kind":"published-quote","locale":"en","page":"theme:zasta/ordering/en","quote":"easy to use","rating":5,"review_date":"2026-09-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5671f9a997d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.