Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“total junk”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e9621df59cf4b9fc063bb1b6295cc1439ec8d1dcac2381d18ec01761a9f8970c
Signature (Ed25519, base64)
0x15nMAF4WuaL4ouEnM+RhuUvcM6X0l9y+8qPoeXSuJuBf0u9FhuETTZt1iN7VqUT1uTobIobRxsKiyKqeIfDA==
Merkle root
4900b1080bdcd3b4c9234f01647614e7004e0a1ae01ead44968e31abeab33265
Merkle path
["e961275d1eeda46cd3a4382e96dbd86a882b9e8a5750ecdfa64ad6c233dd5c7d","3b2fa9546992bde218f9030f45dbc4089be81652ee3bf3492534a4696f9dade1","a9f786979f35b994b950c15a8f000283a8b6510a51a818bbb4ef6ee5ad217f1c","100036cd2cd94182af774fe45247f03084a84f881f34158e763e894454da5ec1","3684e5a20b362e2e4aa27bb34d50d6442bff8e1cc5ca4c2cf0db5ef9fdefd1e0","1f18a99ae1f8ef41cf10535e63a661489bc9af9000abc60cb45ca86904564527","8711d8506e9eafe2f499975a29d60114867ff4482a6ea421a1d4da02a098a656","97472fa4b9c13b4655637fe07a9cd01ba625d29b4c316284bb7131cdaa5010f8","ddb83f88af8ff09dc7180f2ad9fa3a80fdd026a8103ba5460b05d5859b86fc9d","ae02ba474d1332e022bfea558289a96c684b1ff9b036d1d0c583cc4da730080c","2cded96e1c71dae1507249e64d83150e2abd82bb62fc8db0bc6b996d12714e82","05614a9b0d5c44a59c08c901be09a1037fdbca789e49de9536d2657e62dfd95c","b4566c8cec38cb371c7e06723f5def3a7cb60681185ba623bcf995dc0e80d9e7"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3241341297 · entry 108e9186e8c5677a0e53…
Expected log hash
39342fbb95f8cce5be4111719e5450984494edcdff99b8bd9a5c0d2303b67943 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791866192176","kind":"published-quote","locale":"en","page":"brand:zasta","quote":"total junk","rating":1,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4900b1080bdc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.