Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“they not change nothing for 1 year still the same poor options”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2871093963

Proof data

Record hash (SHA-256)

ae45993ee80bd53d2c73802afcbdc31bad0b782f1d2c41f291ccd48c402ff079

Signature (Ed25519, base64)

EtpjFaGzJCcjJAc+oq3pgeMcT7FoJJNef5T01Y1jn1edSYlkiZwu5XEa14qIYPVTWkKs3MfG2FhivpquUDGnAA==

Merkle root

10c793aeb45e0f89b9202290e8cd37afdaa93db762a28319e14e5d167b3b381e

Merkle path

["ae484cd89f83417ec8aac71e045abaca978548dc21cf7c0b97a1b764fa6fb84f","27117c9afb429d30c84b6e8fd2e7ba6b1977052bfae3f658ffaa9548d9cbdb9e","72ca7cdf0f86e0ba08dd2611aba76005d606424aa75aa52cfde674f3a7096b8c","388a6fcca755d7c51f83126a12c9dc0bdf551e9dfa63cf63a03c9184c7d23813","75e108a417678b66848eee0d373f546333d4a15269a10f2b3fef7e5d18c923d6","42fe525c726f1c08dd57bc4f490f5d97a0f91b08d0462af6bd5ac1e2dd55f976","1c94c05808bb5f38106c819faadd7de540c3210b503e621a8cc2d2281f190c95","aa5c7741edd2e3e2fb6390eb9dbfb427f50e88029530a079cc0885ce25038db0","88a789121268fdae169e15a5bfb338feea4c405d7c123f7cd9971dacf1edc8bd","9ef98637ed25d0cc50e8410c69b461df24632fd6d18e1f87435e38d8e0dc3bf5","4a7ec19f5ba376837c57ff188e31557b5c4be8e7c7921aad90d7c3dcfa02ce03","ee4aec4f4219a228b36d00641a4d6491c1579af9648cbb44fd6b328250ade26b","91300f04672de2ea3a6a7045bb6ee4ee2bcdb70d160cb2223186b734f12e97d1","2130a6de1cb1cb6840fb00e7ceb486d0f838ff39b257f32eb622785c4778bb5a","2c29ac82d9fdac3248f80d2844b45fd9f65c01d1ee494b56884d4c99a3da6ff6"]

Anchored

2026-09-17

Public log entry

search.sigstore.dev, log index 2871093963 · entry 108e9186e8c5677aaa83…

Expected log hash

2dc7fe816b6373997045fe2c089e9db0b321b7c653bfed462fbdb27b856b80a8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789531532649","kind":"published-quote","locale":"en","page":"theme:xero/returns/en","quote":"they not change nothing for 1 year still the same poor options","rating":1,"review_date":"2025-05-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.xero.touch","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (10c793aeb45e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.