Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I opened an account about a month and a half ago.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3138947147

Proof data

Record hash (SHA-256)

bdda18be79efb531efc888dff9c155f3fdf7b9f52619b939273beae50f4c5602

Signature (Ed25519, base64)

aBHM7BL247UamX9FrgTHnkPNfDmUm3uoAC7vIE4OZh0VsN2WZHAIybXjn5nbhSYpFmwBAo47/E5AoN2//c8wDw==

Merkle root

1b26d1b85473caad1868633ec4c931eb970e81199eea87926818f3f1753af37b

Merkle path

["bddca531c01885e56824e95e4c22447cec15f7ac76e44e6b4eb9c8fa77c69064","e7c52a498944d267dec0b497e6c8000a2ba4b6fae849088609522006fd770b72","36cebc4d2d3c71957b255324547e8a06758ffd9c47c42bf70fab9250218e08ab","9a0aa9cb47a7923bee9ca3beaa6159ca731799a0eb229026c2bee1adafe983d1","2f13d6dfa9555300158bf659a21a1cf66bd609fbc8f450dcb9da0d2f231e755d","5f6bac6da39480f62ccbc2753a665a1765a8bb651680c379f62c5b19e411169c","788c9c7519eccba01d7c7308b4702dc2209cf70b5750a4309a3c008bc7e62a71","6083b81a1b41bd0f11553e0391e268b66280a1aa87e00221084fab1340e40e95","5d42ad2641fbcc3b3133287add489a68384dc1e37b4c803f34c3693eaab1c524","8415690c8956e8de17828f8ebf58a11d1fcbef9fda619ec9fff0cd529e2b1433","51737f1b791c83b67fbf7ce94ae187ac7da5258a697c3a57883204f0b1c90a0a","0928ecf88354927cf77248647655f6a8bb07dea2f6f4911e0f34fbbcb0f1ef7a","c0dee208cfc82bb58ef8bfbdce70ae59669cc0fafa6229438e70014c20ddc06e","f13bd3931ffab245c82268d5388ec4e7a23a41a86394a369b97f89216cceb3ad","06054c91b82ccf7b99bb6b4fcb7c60afa97f93295e6829b75e5bf1efe9493e63"]

Anchored

2026-10-08

Public log entry

search.sigstore.dev, log index 3138947147 · entry 108e9186e8c5677a2712…

Expected log hash

8f66b765b7efcb11dcdcf57b81c46ed3317a5895f5b870638e23b76f1efbb2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791425549743","kind":"published-quote","locale":"en","page":"brand:wave","quote":"I opened an account about a month and a half ago.","rating":1,"review_date":"2026-08-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.waveapps.sales","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b26d1b85473…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.