Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Got my money back, must say it's simple to use”
Google Play · 5/5 · 2026-09-03

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3123908662

Proof data

Record hash (SHA-256): b95809b87c6d42ea10741779e30a858dfcbdbb618d91970cd0ad775f0f99c619
Signature (Ed25519, base64): q5eHBTbp2FL4QemNFzg5sZgHbd3i0b+8g1x+EGWUWf3J6Mm+l8GNCga3fqA83l2NL+pg6oGWl1oOPzWZ1y7MBA==
Merkle root: c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path: ["b956abf2f40e603d057477fca2ede7ca840fc1c3adf76793a9da56091628bb28","0f409d402ef91b799488f9ca1d5af5bbc1ee72dbaf0f73621c116a0c90c43e88","f942823a632afbe940c9c3e24bc65a4e61772d7f297094c379fa5a05615140f7","cbcffe0ed05e62f76c3944f87c74899053cc60f39b841181f7362647be18a390","88f0cd3e3b4d236aad20f0714282116e8e51e170d3343d881e0899fafa6ecef9","a0c7cb6948ddbf4fa558b7fbaa8c5245a855571b44221300e33a3a1566aeaa3e","8e9abb742f599a70427ab015da54e866cdbd10b6a8e5a75ac8de052d7f140236","d4afe376397b80678b0f8ecb5e0404c8936c68c3a83cf88421bef7dcb2a88ec2","e94d353070421bec9ab7fa527d1697e8ffa5bb3bccd9ccecb7b289df522d6eae","dacfc065b03c3291dffdaf9d70893394c20f56dc77ff65f2a5a9ab81f429676f","957ef4cdecf96092f98188c8b5fa2371a97a5523ba63987fd007ef83c52238d9","7d1064096d315df35fac08bd88c207823cf44d9f53462fdc3bce8eb6d1967a85","ac0cf0905b4c6b990aace09affc00130a5f0345b56a32b37fe9b0f0d56ecb1ab","7edfc85f9440fe7fef8e7edd6f1372271982f006f84b94693306aed78930ab32","ea816c3f8ecd74fdcdc9c068bf36a30dea5aa6d104e982532f9e8769ceaf3fff"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash: 5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791348381030","kind":"published-quote","locale":"en","page":"theme:zasta/billing/en","quote":"Got my money back, must say it's simple to use","rating":5,"review_date":"2026-09-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.