Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything went quickly and without any problems.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3124493015

Proof data

Record hash (SHA-256)

b768a254d0d39af6e724001531bbb1f71e101b71059bddfcaf2362f89714627e

Signature (Ed25519, base64)

MAWwPs8Zkbd0x8WkFtf7YM3oVq1nr50egkminugiDwE4YxRE+r/d+jHYmma0o3euK1eyVf7d2FNFmbS5m4LbAA==

Merkle root

c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22

Merkle path

["b7697f1cc65462d7a10f22cc23ce9dfe793ed82b39df38268483d2fd88ad41d6","3dfbaeb826503903690ea4ee1aacf55d8dcf641b231e88f5d81b65e15c1b5e91","2d382b625675c927975db73f61d373c2eec6eb1a446cde347400f32560d38f6e","3f4a6bb316c4b4cc5f136cfc5c6a503a43dd19ae79f340e72c41f4dc63441b01","a3ebbb808156a4d32430667e7b10f30876f3c0c9b42915867009f64a90ba5faa","8c4991ca3c1647a7b36f9e64cce13d5be25c9d08ad764ffdd77c317ead6a6377","eab4a27ace6d0dfeff3357a86a762f2cd74a612d6fa38392076bd899f1e42544","e236a7bc4c8dcaf545113b10cf5f8bd9817d700c05660fe10799aea690c770fd","f732ba8d550fd4db3f012a6507bcc6c437f7d24ba86ee20c736d773a141578fa","cbb33e7882325eaed6d8bd8f7c9a41bb6f42e74dadf48d7635743dbca4cf3976","de041bdb7fcc0b0d8c16b08700ba9928b5f1eb6f941ae91d91270bfd6fb81fd1","1d91e7f09e0eee7df9b0495492d1288506be9c0a875c70e754657bc2922d56a5","0ca0aee478fa1ba69bb70f4260cb46f18cf0d6f39723c3088eef45091c048f53","94807f81d1501aa004c640d69440b9636cee1d43c6f07fbf281372be591c6480","dac1c339b376d49b10e240bfb32d2ada460f1b51d5428b7290189b662873c331"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…

Expected log hash

0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791350987184","kind":"published-quote","locale":"en","page":"brand:zasta","quote":"Everything went quickly and without any problems.","rating":5,"review_date":"2026-09-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.