Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“they deduct too many fees, it's completely wrong”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
b251895b987a2d7cfef053036368735c1963444485f0abc8f73f8f5bcebd39a2
Signature (Ed25519, base64)
S+M7fJWabbG+gLlLHDdLZVUcWIOKQBkoEKBlOSdoe4Snces36no/UfAXoD3+4JSIWB4g0TTUUg/BliiOx1tUDQ==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["b255ebdbcf3ecf35cbdb4db7396878a17ddf8df3a113de03526b258884a8f6c1","8473ebc36d4069a61c6919e8910f740b607ec2f72daa8866d4aaf4aae244c58b","db059598a7c22d3e86bec6ba74d822e1d969926b6194942d7b12c725ed4123a0","3b95949abb9197b7bbddc7baa1eb1625e20649e86693f028f3c88c856974f95e","d2b5fdec54f68bbe7ce07de863bf45b6a39845a8579a5a92c5a2ab3303f815a2","0c91a1598d95665e9dba8a9f765b086f7cc62f9303fb0302672562a11d7ddb2a","ced1b3032f8576ce69848d20bcdbc18b535d1e689fb863c4a27529894e9e7913","54df1b923cef8fc7791d4baed1369ab53110966b2fd575bdd1d7c38f3a919987","fe219ebc35f4b20646cdd98b23de4658444e201180d30bc39ff268623fbf6e7e","727ae24a407227b4a1fd23c341b905273c19bb94afc95ab35b30aa2b10821633","f3693b580b45c280afa64439a71a70612e25c7ba9e8171b0908b793e51cac311","2d32adf6a52a87df4ee756f1eb3d627ce492874d43c9228023c0f01d78bf4db6","4df1bb4e92b8e41fef337b07576176208052564f075fb70e20d9fd388eb3a1ad","7e713154c923be82ce1375371bfd0581a450c49f074e148372ef4740f1434073","0f1ba71c060deedc77d8566f04d4f91c80878775c47405bff7bedef8fadff3b3"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"theme:zasta/billing/en","quote":"they deduct too many fees, it's completely wrong","rating":4,"review_date":"2026-09-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.