Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Had a great experience”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
dd6ae5b7d1951eaedd8566afe31b985ad3dff659d8e1d7e0c3a602b20086ea40
Signature (Ed25519, base64)
dfne2vRRhYYlxi6M73m2i5TkcI6ptYQxq0vJiItfAAIQfRViKuum40TQensVOhmqTB69Sp3WWJLATE4qdBWgAg==
Merkle root
feb82b7f8aea18b46b248fac49fdc21a6b138fec64dc2fa12c4b3c7a81799706
Merkle path
["dd6af8c692e482e5af3035b36e554eed297f8195fb29d8cbaed2aed9520d5b39","1a12c66424203c97b9434deaebc63cc0344fa5ee23e56487b0dbcae136e826cb","bfa35c629dba3d05fb90dffd18b084cfda4bfbaa0dbf4e356dbbdb35831fde3d","d7fecf4b8d58f85718d98b4329b6710c32ab472a87e7376f4f5ff76f1f3ff4a9","da9c3e9aca6a8d434bf9d44241cc01971e222d2d0201b3f5a4b971175ef38361","5aef8a39753f7501f0208a2b4e55c577264a838346316d03f124e6da0a5a3f82","bb9f7a502691a268267b11c564bd43b15260e582d06d62e8c6cd50d81435df53","1563f6e3dc4088b7601c6e1d9aa76479cdb52de0491a5d709981febc5c4a35f4","873a660e17961c9e2f8c52f8dacdf1db2bf3a4021db762ae84e2aa089b2f504d","f798de913b25917425aa5ca20b70b934a6fc3a2f0ccf6646bffcb2f7bdfadc5f","079e711e5c17fc184c9a887695aa1e3c3cf9c72e6d5aa0e4fb884fcf2aff45c8","c2a726574d03e279903191da1b86f3b6925a1b562c291a5bbb911a97d14b25e4","17e2a55c2f83259cfc4972d49f14c6d98843965d695e0ba0cc7ad953ca852fc6","e6a39c1e3a8ee923d6c694e5c8148fd9036767f27173ccfd95c1fa41870eb82d","c63ac18932e0255ab2763f8017dd7d3a8a4963e42e4624815bb352fabc7bb17d"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3122521988 · entry 108e9186e8c5677afa72…
Expected log hash
9fa0d177312c5b0b22ba9dc313f3316134d71d179dc19912df4abe4610de68bf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791343163559","kind":"published-quote","locale":"en","page":"brand:zasta","quote":"Had a great experience","rating":5,"review_date":"2026-09-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (feb82b7f8aea…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.