Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I can only recommend the app”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e3794ef1593fb81446e9011bdb99b3d539bed1c7f4541e1d530bbb87eed4904a
Signature (Ed25519, base64)
SBG2sPRfHYbuH1jNJj5kjcFDb+B/5+U+VNfMezh+qdnVh3wx38bb+9rsqydo5itNJDLb2MYkvnkJRSrqWjUHCg==
Merkle root
dae11b7f399fa27d7e91aa4463415971ac3f4413815a3c608e4b798805e78c60
Merkle path
["e37f2a031ef74d4ac105d9bf07c67795d9613151897cfcc93752d8ff1164e4a3","482f4953c19e57e3da4f06f8fb39d221ef89aab15f7a0402e30ecc21a04aaba5","31a12ad6804b60a58784a098a1fb47a9faabf477af5b6b47d24a5054e3527eac","5c302a46592bcd5aa7fed53c9f616e3a798fc32a77053a63970dee02db79835f","b89d9a5af680359677a8c0bf85e45ee28d277d4999f53e67865a943d290cb2ac","be74a044b0baf8ae1effd25463fed3da1187361a41ec62efdd84f16f706b165c","4afb21ed32f4f8be7e1b51155e374a86b9c088cacb899cb1dd44f6f1881cae6c","7c2ff5947f4131d65c6c8cce83bceb620e18520ae7a7e05ede6f3e67e9542c4c","bba098253b96827c16013a5a877c3f0547a794fad162accb74b50ea6931375b4","42ae595e5fa1451290e049ec4a10f5000b8e00232768c7190bc74e6311dd8753","1991dd0dae15c158d969979d9d4613b6c952bd3a170956ce3aa78fdfe2ae53e0","9aab723908ccc22a62cf373e89034ea4d7c93fee14f2fc3a65fc963ac224459b","cc863bff7f0e26ca10ced4cebb314480def4ad1ce33050b75174cec107c26264"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3161668256 · entry 108e9186e8c5677a744e…
Expected log hash
dbaeb9745833827bd692133822ce98bad4dbbf6d52d00fcfdadfb4c533d214a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791537031439","kind":"published-quote","locale":"en","page":"brand:zasta","quote":"I can only recommend the app","rating":5,"review_date":"2026-09-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dae11b7f399f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.