Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A new account is required, supposedly for data protection reasons.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3140475820

Proof data

Record hash (SHA-256)

da4261fd0df1f366b7fe063cc1b47ce28712078da977dfeb1b702fc86215f589

Signature (Ed25519, base64)

76cNn1XE1tUzxCu2hcZF+Vp6IrnbSTUAn0V6XxaCgdEf30qfd6jwO2QzxF88AYj95yzEr7Kw8Mqd1EjFHU6WBg==

Merkle root

52d6be1abed15ebd0724a0e1a493d5805e1ea49ddcaf8e9e5584928cd3e4d759

Merkle path

["da473a5ce65740de200f5d3e2a4422dad2dd534a73eb5882fe3b344c94e7555d","46e5aaa08b615dbdfdcb6a83c6b47ad5a48c8ddd2691cd0cdd3b2d04cda05214","c9260381d8e5ae368613d2574c46ee3641c47afac4492bde1c62b475bf95b1c3","2c2a0e1bba5d7775fafe9c8db48bce1aeb1eaf655696901b4d6f9c85393202f7","f768b95ec8b190a710a2015e468d3dbed4ea7047b06e8c6a3f170be96ceb7585","1d47567ffe453655f0c0dd6ecdd76515d5833e2018bed4cec6118066a008e223","a482658f319c1972dd326a9e6293e805e38e339dfd00485edd9001a55ec3a5ae","312f6fd648daa5f0cb14f26b95916ff1cbe806e70b79f4b6cfc3ab376f5b0037","35585af35931f344b9a5cfd92821b995de40601f7a37229685e1be98d3b1690c","a02418ce1da47f216f548ba1ebcb43c963e7ce47b5e234db5c857036623b3ba4","72cb136d71213259e44f69913bcfcc0739e1e19e07cd821761574f62999f234e","8e5b5f164b4138fd16cac15226197ff2d995652372ffc88c306415b74fb17312","6cdaaeb423ac3ca9e71d9b6b7eb5dc348e1fe6f5917591151d442780b0e12a0a"]

Anchored

2026-10-08

Public log entry

search.sigstore.dev, log index 3140475820 · entry 108e9186e8c5677a78c2…

Expected log hash

bb68bef30792bf00f645df162a48943f770bc3f026216a44dedb4651c8ac0917 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791431489246","kind":"published-quote","locale":"en","page":"brand:v-zug","quote":"A new account is required, supposedly for data protection reasons.","rating":3,"review_date":"2025-02-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52d6be1abed1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.