Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything went quickly and without any problems.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3220367991

Proof data

Record hash (SHA-256)

ec644d0c401e86a71a0135c41d976fbf7b03837bdfbe91e9fefe51b8fc7ec4f7

Signature (Ed25519, base64)

yAGofqlSOlgmLikNoqJPwvN8phS+vfJ7Hd+x6Ef+iHRKtRBn4R13yum/hU+tI566BnDlNiFcfWrgS232ZGweCQ==

Merkle root

8e481f891fa4a8f9e77c0279ca152fab4383b65a50decc840d9fd7569bdfbaa3

Merkle path

["ec63e0092cf4f9ec9fd30c320536bfc870774238c6ce5ddc71d7f931f950257c","da4c51a10a88404a5359f1a931ab8b915f11126f85969a29ccd5174edd4b84f7","8fd020ddead417a4e27228ad035ab05774bf703e11eaea44d1ef8311394cda1a","a59e718d527118b5de21023709591b09a8d887fbb8d8ca34b92818109fed9aa0","489e5b4817ac24d0161f94c51a3bb5857a75d9a7d90c2a31889770d35e5942a5","0a62b6392c727667ca17d61c4ea214a6b2131918286f94540a85e49b61eaaf55","c19e74255b13ce84a4df50277f034a0b11563e982d9d64e3871609ac8fbb813c","4d8a2f6cc4cf9fb3f903449553a3cfc58d45803df6c5784bc91d984589d70cbd","8a8aa06863e42df58309f0d6a3ad516b214cf8593b7189bb0dc832410aa34702","69a5480629a983eaee2e7969ca642798b0d693bbfa328543a3554e58c5ab99c7","22ca921c51eab30e433e750c00b7896405dfd9d94f07be9c214cde110951572d","a89a81e38204be9168e59c55633a35491cd0552dd55f100f8e02018f179d3aa9","3ce3696ff056c16f226fa9db40b66fc2664834a9e8575ac718ab915079808e66","72cccd8704b0812948a2ce165fba0fffbbe09534d9fac74dc08939550b8edd25"]

Anchored

2026-10-12

Public log entry

search.sigstore.dev, log index 3220367991 · entry 108e9186e8c5677a60ce…

Expected log hash

9a2b3ddad9c3b29dc171a15554fc81f3d4710c01a7565bd2f28b92e7b639f6dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791776812348","kind":"published-quote","locale":"en","page":"brand:zasta","quote":"Everything went quickly and without any problems.","rating":5,"review_date":"2026-09-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8e481f891fa4…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.