Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app works”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ba6fdc79726d9357bd132375935c591a8db5742e1c417e324f4e85f5a269280f
Signature (Ed25519, base64)
MnFUY7dmdFgah1H77QO5VUN8VEJ3A9ZALcTVu5GNZ3KaqYA8xTIpqSPtFSPVBc2/BgjFPb+X8zcl6g2tiTGfCg==
Merkle root
ffbc979c8901fdf55f43c5151768b18a738fc1c271c9b2dc97349c3fa8ed35d2
Merkle path
["ba6bc4787ca13a05a31d1981ff9b55404d14444b7064b6b1c36635c928a23753","0d4e5f1ee74f4f4aa0401ef02b290cbd9882a8867b4d1e179680da17ad0b41ad","a06108d651f43db8a96c26684122ca8d3ec44ff1a90ed0bb9412053d9bf3000e","00c39fac6a46b32c7c13a83f58387f42703e63559fbd53335f5a20dec0631b27","60908951fc5889d6be85dcd4c4ee3bd6750195fc3e58baa279af59930c877070","30e95e07044955a8951c398e3705576b8dfaa1979ea5f7bb12191d76ddbbbc58","5fff71932f93a195afe55983476fb06562e1998df8e5de4ac55afc7588efaee2","a01ef613e0007f6987d093fd6515abaeb224fc89a6b1bd9856187fa5705a4c44","b041c0dfc8e1418029c31561498975601135f06107c9c226da3e972df7ed0679","275cde997bb1f4294f0e4ba44423136751c1a09fccc99bf6900ff70b01847403","4c9ed9fb759a761ecf02e2c564263ef9b2999c721c494e2718df36302a739dbe","3e8edad7bdee301a1d3b578d752a6400e1b7b3b0a6be339c3f3afd7dfa0b1a04","2c476d4e747fd56a8b361a4110940a59f5be0c9a58e6e5345d109e175305b7c4","fa02e3cb4305ddf6647687fdaf27c5995f6b3fc20441fcc85ccb898bf6cad259"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199173952 · entry 108e9186e8c5677a85d2…
Expected log hash
3bc66074c7b0a853326bf5ba0590a111eee6455dac5c98c791c22eeea9a48920 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791689192448","kind":"published-quote","locale":"en","page":"brand:concordia","quote":"The app works","rating":4,"review_date":"2026-04-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.concordia.myconcordia","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ffbc979c8901…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.