Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have to pay 100 euros now, which is more than I got back.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2882354328

Proof data

Record hash (SHA-256)

e4caaa506dd312c7ab62b9bf57991b81975701cc9522703ba985e67b11b643b1

Signature (Ed25519, base64)

73xxqulMKOlRwwgYyYFaRoHZguMPaMHbci844hPghfe0wuW9EJQjJB7sHrVrF0TExmn5tH3NXHAvcwzuc68TCw==

Merkle root

a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c

Merkle path

["e4ca1b2f11a86a62c1b3e65c5a4011b91546483b2d6c8ddb2a432b0bbd81ee60","86d6d24ebb338cd917af039a3e1e112cb71a18beb2a2ffb86b25078aafb0fc63","a1ca4c30e0c666b79e12cdcc12ed4335ba23b4c7f468de53617fa256f8aa12cc","954a1e71bcb3ad7abbc4da5cc8b198cd903505caa1aaef3e76bbaf881381beea","bdb016b333b299f69cae25aa9b53a9f904c49119c4b8cc4e760a55875dd567ed","421e475bab565c1928665359c13b59af3276e87d56578825b25cfe156e7ef7cd","3a7bd62425adaaa50b2f6166faf70e48cbeda0427543d9ecbd665be22e45d716","f4a46f826ec24a1289bb74dfee1ec563e584138b539d6b52bd60be42bc3e90c2","0ee3eee81535a412b400e32a5cba7b5dfd5bd6fc0840bd876e858a943decdf73","723b4a122ddeecb1b973676adba6ebca5f35632447cf7e103366811c1cebad8d","7614e321c1f756b8dae2ee1dce86a2a9e73fd362cb4368fb1cca4cedb92c1f0c","a4a97919c4175c0448825271c49799010a0d6acdd566eb4145c0a8dd4727efc2","e3dfd0ce13b4f18d9be466f664decf913e4c761baf693ad01a6280777721ad5e","96604383e0e3cd500d4560285508cbcc8eef5ad88e576fedea27dc38c3fc8ebd","142316fcc45d8fbb9a33df6e9be8f563650927c4e612ee96d4bcac9064ee60c4"]

Anchored

2026-09-18

Public log entry

search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…

Expected log hash

5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789619628558","kind":"published-quote","locale":"en","page":"theme:taxfix/price/en","quote":"I have to pay 100 euros now, which is more than I got back.","rating":1,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.