Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“cant open the app”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
b0e1cc4d77bb1bb939eff227bd6499f2da73ed4483ce965c8ac78fec05daf978
Signature (Ed25519, base64)
s1wQJKiF5g6F4kks8hSZ5nmjFjRB/+v/uhEP9iB7RTq0Jco4pnrsQjYS9+QpSLTtYwUYHuW+zgVSb2k8CBZuDw==
Merkle root
de8b012bed4822c8c2019277a5dd0d29f64a2b911dca893a0dc4a34997d27c9b
Merkle path
["b0df21632eb61930b78f2dbb131ab39fc5940c98d7388ef383c72eed3c869620","211e03147e92ad2734469fea10e1c700a0f3031cb7f21c600b62417220d38b63","c9712ef1446088882eab44fdab79c4f7d06a395cb274246379c56a848f84ad94","5dd8bc9f0f9e197bc2c8d6909b7867163ee0d6a69b453d172b7c0ec3f3459733","30d688f9958b4a6d34d61d44613fcdf0b89e8e8955e4dc3a1b0c771cf983c361","94e7ca85268fcb462bd3f498c4a52ed62e199698f490682a3aa714092e5b4411","77398fad335a23bfcf004b60a86ab7d4808d61d248cb4a643e05a3e8b1da8c03","46ffa0a3b37615d20445039fca9f557acea828676895b159d23ccc5c90aac6df","e7ee724a08f48e68425544379aa805c4ef0271eb41fc56b537b86e52212d19cd","55d5732160162475a75d1bd207fba271dbafa19f90df5195ff0502d3e693e913","d0da5dc2f32f53a2dc35cbe21e76eea0f274c82d02a465962168452a2b879859","c10ca41a40bcee8f885609c8cebe910db611b45ce866be98203656a34efda2a1","2ef1d4884ce058bbca7372a3f146151580803420e2caf68191c2fb6658c8939e","6488b09d50215cad86af69dcaf04a9b28d1eca2b8f41f338d648e6a6b3a80fb3","02a545cf973db8971f86396f9a284ac1c13f9ca7741f825ebff631e0b74bea6b"]
Anchored
2026-08-17
Public log entry
search.sigstore.dev, log index 2495114363 · entry 108e9186e8c5677a28c4…
Expected log hash
27023b3a9ff654410608df4b8b5cf048db8313c7ae7f1826ed51f9640b0108c2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786934720554","kind":"published-quote","locale":"en","page":"brand:worldline","quote":"cant open the app","rating":1,"review_date":"2025-10-29","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=eu.softpos.softposwrapper.wl","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (de8b012bed48…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.