Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“not even allowing me to fully sync the data from the watch”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f3a6bc08874e2d2ef24157655dc073093f9f8a1f34e70c91e4ecea86a178bf6e
Signature (Ed25519, base64)
MUuH1hS6zczOxbjucBUAoxZfxhFdb8eR0EHcZYmgUQiZayJIfoZkXcviOf9tpg39B2a5m7LtdLHPnFEcuk5/Bg==
Merkle root
3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path
["f3a4aacdec678dc70562a534dd50b47a3a85d50c8e29b617c6912a65f3d5e992","ed707a0af69c3604abe24e93544857417821b2b39007dcfa5a9e379190b3e3c2","d01720de9474af6df3c44c34e8de5a0e940c51954263d567d9a57ced80f18e08","6799218bf7e98f56fcf28afbc2e17a9fa9bac86178e7bb516b4b80a0c0bfd2c7","c100102d8140ce20943f9b47a5f7107d599a839a0c5579449036698d9172bff8","02947616144b7e1e15e737d5f81f021ae528ff2a3f886ac5d39cdc05a2f731a3","a342fa4cd1f62139923c255dbe4c9d0bfe13f48cd250e8f92d4f22222eee3894","eef7442a12bed510cdbddadfd5852901bb319da8ec2c4520420d3ffc72f12ba5","0966800ad1e497028cc390dbab101766d3a70b8c12419d27a9f1479f9ae12e49","a9c8aaa2c69dc8bc8c0db4501ee22b980576d8522d7f933d0b89f09635ff4a5d","e5e1d60beaab8be14de5d5ec2bb4efabb118655edf95e8a0bf4c52228a2e56cb","5d6850e28ec09372dee79889bb8f26555ed01794e144d7af23e4c235e632eefe","02f47b6d7dad8f32797ca5aba8e2e1f8250e4fab89ca82b067986f372deff6c4"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash
d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787131980797","kind":"published-quote","locale":"de","page":"brand:fossil","quote":"not even allowing me to fully sync the data from the watch","rating":1,"review_date":"2026-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.fossil.wearables.fossil","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.