Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Good and fast.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2890214870

Proof data

Record hash (SHA-256)

a5dbabd5651ff9f615adcb976a186f91f73f8530416e0664e42f51855a3faf0a

Signature (Ed25519, base64)

fhra1MyQ5df2vOYCvup7BlF/1supiqkvd/mzwX7AZdCJA6xVO07tuIPRgRJ/WshsDnaXXsxIVf1mPjU3+AhxDA==

Merkle root

04b39eaa56e1cf8f75dc8eac18bf6942167c8418ea731a7471223f0be60e3e6c

Merkle path

["a5df83f2565fd43aaa7ab22dc14737e7bb92cb42a5109f6309153648590da5ff","4e4fb7108bc66da8c35f72a34d6e402b1f4d92e6f0a909d288af09cf336bf9f7","c23db25fe49be17aabfb62008ca0ab516810f544eaada2f8a3a8e043736e5208","a350e9cc8b5ed70421337d20af9a843cc2c8f0fb3fc140ef58064c73e784a063","98fb1f04c5ebae0c4a6a4a4ea6d13614a3403ad0986aa81f4e8d94b7114362ca","e85656a6b7ac8f0e82440a3a7a65c1b3b80090ac1f64e22274eae2a092e90a80","ee30af16e0366695bd0ff8937814ee6ee1b099cfc9aa3fbc6ff3c77636d158ae","a5a2b1c0e2c878bd83e935d6f040101d75c3e47d940b9868f6dbd660ee02d83f","d1cd1941311f178aea1d61183badbea82c7d0e8b0a930b34933631183da5813d","064a71e47299bda0697a8aa3bdd88b80b35c0509ff5502d0d7f43f1e63d3802c","8dfef14c860c8ee43da5a380cbe5bc2b4c4e0ee63a7f062311e6ec1f302c9965","c1934eee39f083a1bb0634f445e2323dd708991a6df06ff59699cda4ef1f90c9","2f760d0f42bf27702bb03975eaf8d6ea5e036b0f49b2fda05a97a4b8e2bd9942","8f074eddb198349108c1e544aa98c8c80e756f627b29b4943cfd74cb3331adf1","3ba88b0016422cde319348a72d81ed01eacc4bd155bae80b5c4b6ab6d98a745f"]

Anchored

2026-09-19

Public log entry

search.sigstore.dev, log index 2890214870 · entry 108e9186e8c5677af53b…

Expected log hash

1f3acef0f063246e051bf412e40f4279cb96ed334ff7b0647a13320c1b31c4fa The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789722569406","kind":"published-quote","locale":"en","page":"theme:taxfix/delivery/en","quote":"Good and fast.","rating":5,"review_date":"2026-07-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (04b39eaa56e1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.