Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The advertising is false!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
bc2a715a9c8861f920e58aa1b4f3dec6586a380ee4a26cd760bd70da5d540133
Signature (Ed25519, base64)
LqYHnsD5cLmX3fAo8rQohqA/aXmCVGqzWG2rI1nzCU+eKrz3+ZGoO268g0ciemR1olQqGzNBL9te0+xWeYUWAg==
Merkle root
f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7
Merkle path
["bc27b4243035ec3a1867c3ea5941c3c95400165ad55f093320f9a9567cdb2ada","b02a04a717feb0a067013b4f662d53bb5a68fd52bd9e56747c57456f08faecfa","feaf5019c5188d76228f2d764753eaf5fc57f1dddd8370e01b21ce74661f00a5","4e4fd2ab508567c0171fe410024aee71cc528e433b2daf723496fa794b343cff","55c099b793d862d6c52b64902af6fa2ec683e2f974f60974a80c77455d4cf784","972e4483e449a1307c6168984d6db1645dd056d6070a47d6768c11c15e644ff4","7fa72a97b44845aab65bf7c3ba37c454ca57a5c61574de385bdc21dbe241b1eb","2aea2ab6f49d2069e60acd6e5c5fb919041cd40eadbaeca3a3f2d261bcaf49b7","e29e9e0248aa7ade4b78675b2ad67a978a52de757509f0f7bb41ccecb767fcd0","5dcdcae83b6547640c236c2edddd5369370b4c67415ee585828c67d6a81fa353","7d161190436828e3b924be991abf6ca9de9f216df87438fbbbdcfd9eb09494c5","304838f685accca1ae3f45c957e53ba7386fb8985c3a192ff126e9253964c410","a618a04450ddb2e735a84d672af3987085792f675446a86cd0ae55793e873153","313187cc6b6f4604419538cba862872ebf0808d9a29a91fe1debaeea14203481","db68423323e09aea2b604cfadc31f46b31b4c7c4a02b09b3fe1987d87269ad9b"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…
Expected log hash
083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791172602574","kind":"published-quote","locale":"en","page":"subtheme:zasta/service/misleading-ads/en","quote":"The advertising is false!","rating":1,"review_date":"2026-09-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.