Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The privacy argument is very flimsy.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
b669a77e6a3a13dde7108ec18fb619029725ee82ffc78328292758f949f8d0a3
Signature (Ed25519, base64)
cI4D1DM52ipgjtvRKhF7MXoKRX6LB46Bo5R6aLFKZXoKvHwq/mqDUaQx7iAa4ffWqpWWNFtK2Ewf60L++qC9Aw==
Merkle root
b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02
Merkle path
["b6610d17788af4c3392960971030dc4aa61226e326bcd28ddd03758821b47bf0","be2c6abf384ef179822e2fcd4db3d5889e30ceadf8c1553a1e868d7c7d51fee0","c05eafcc7b3b134b5d7380201f67de3104189176804485d9be300507bf599462","1b985978e689e99bb4ed16fc60bd560e643a1e7541be6b15241f429b8877a275","5202bed0493dbbbafc64bc1c8030f05ec24bb931e02ee9c138608cce8015c07a","c769f39ae622e6b262700784a3dcea7cd4ecf06e8a5e04448378e9b89f464cf4","575a764e9d56e06e35c9961add635398b26c7ac8f38b96d2f267f3d901baabb3","aa52910bfd27cbca20b5639e7b2331cfd2250f7f771f1f895ea3c68e89ac99a9","f3ba7decaf26413c1042de120a8e92cfa7f126ca86127061d9108d178b92b675","f594ec1eec9c0c5b9e5f3c1cc12e679bc40092e5d751c2ee41d00492ef5e47ac","857e3ee1e9d95b5a725ef6d292706233d4b7b1774706be7cce942c5ef1551bcc","8e90fbff84453d26da9a25ba9530d677aecf62355e82abaefcef4642ecd6818d","ff0ce3b59f4b6fff6b806e01d20d764fb2b7a5651693c19ab4bf8a8b5ce5f968","05978e8b9ad5fd39833c65b8b951e8c80cf426334c441fa8a8bff8eb8eeaf534","4543e8b9ac7bd077d9526acfdae449f0a0d5517cbb42414f50ef930ecdb9470b"]
Anchored
2026-09-22
Public log entry
search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…
Expected log hash
bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789969984102","kind":"published-quote","locale":"en","page":"theme:v-zug/ordering/en","quote":"The privacy argument is very flimsy.","rating":3,"review_date":"2025-01-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.