Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I always have to log in again.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f8b199f5d24ca450cd01792f25b71f7eedcff66e264f81a70f305e8a9d7d3d19
Signature (Ed25519, base64)
zxnJeJqQ69IJuEpQVvnWl1ZfuEQWwrArbr8JeNlio4L767qUroBi7HhT/kG0U0ml2UOClqfnH9lHwypTaUs1AA==
Merkle root
f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7
Merkle path
["f8ade18270e546d14ee3d31945f76c312770d2cf43f04c8633a383416858257b","62ef0bf625201a2294beab23a8c033f16c47249ffa1576a7f75396e61fd77890","d3d91aed0894daf0a719e8b3269999e85beb56d5f942836bc1b21d8aa5d283e2","d8608d84f0050a439200c20ea15a981362ad6cb256dbd807f938490daa54dd34","a092eaba839402d1e1ba3f860cfe8c2ae8278b13421d04129a1ffb051c7e6d29","4b41793f24e0bd17fa9e4998b0365412b5f967b4b0e403df73d5a769cd04cf88","0d27f3ca05cfca535c111d7e39cda6e2f83985c922855c6a876f0e686b3ecc68","dc1f5e4fffe62f83afd0457084effc3eebdecaac79b92fda4026e1df2b6bfcbc","866d69b66c32a2cd629092e0f0b73190d635e28b71ce22532f6962dcd1970bad","9cd2c23d95121ad6eb5144c3d66c35e7d6c13fb07f6ee37c92a3b9e13ee420d0","74e7db99a14b3e936be30d65f166832965a2e4197ea62037759efe51ce4320ce","92cb67e35a766789781c180b8f8e9d11b221ca98f3814d3117b7dc23ba0845e8","6cbfd68cf9d050dd78f2d17cff00b0799a8eca6b85e7265d1d2dc8f28e79f88f","b11fbb0a0aa0ab69da0143c7d1f505893ebe09ade960c6f0d593eeb24126c245","db68423323e09aea2b604cfadc31f46b31b4c7c4a02b09b3fe1987d87269ad9b"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…
Expected log hash
083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791172602574","kind":"published-quote","locale":"en","page":"brand:schulthess","quote":"I always have to log in again.","rating":2,"review_date":"2026-04-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.schulthess.mobile.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.