Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Probably over 2 years old.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3124493015

Proof data

Record hash (SHA-256)

fa4e16179cfe306f2c93af2129aefac2fa48ea9e644a9c84613941f85cb6ca51

Signature (Ed25519, base64)

Ov4Z+cX+DqC85jZwLbs7jzMe2kyeNYLLJfIMajW+/DNqqJctv6RcxMaxf7P8i/t31OmoLN2ZJsNYCfCjk7lYBQ==

Merkle root

c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22

Merkle path

["fa522efb9c48ab3ee22b7d9f72d1f63acb95207fc62470249e0f4c9acd4f6b6a","8b1b2d6626836670ff9c2a836cadad5dcb2525ea9a226d1eaa2cf499969fdff2","8c98cfd2a1d5a748344a9f83caa526372d6b06aea6dea07b95213d6759bbed65","9cf4b728895c3414f20c0a4edfe39cd731ffbbaebad196fc1cfd06b31b4f3360","a9ad9f9e1ed7e77fbaca1da863670b55ebed39b385ad68ca62f32653002bae97","ec15e9f74c3590a6742ba51a60222f2f91a8dff5ca34011eca2b46fc836d7793","ca4e951bcf92132dfc8c3abc0fd5fac3e996742e22cd8e2a1d3c745b20f49057","d16474ab1a65f883329731f591924cbf5461a1e1276df4f5a0ea41e160b0bd34","06c58cd751d066a3d8779274a01129b51c68715a6f9c397f9e56ed46014f35e5","b2e7e491f54360a52ba3310fb14a0f27684cf3bd120c32d5b0807a37120dd440","09549e2cee121cde47605c1646c0819740897cf99b2dfc2a33225d9692b819ac","9bc6da086d9d773db2319296816a5122ae6243df07b38d1fe16fb0930243c226","4f4a409828316f3c6174f93fc95756b3e0d7370426e1385dc3cddbcd4e22522e","dac1c339b376d49b10e240bfb32d2ada460f1b51d5428b7290189b662873c331"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…

Expected log hash

0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791350987184","kind":"published-quote","locale":"en","page":"brand:anton-paar","quote":"Probably over 2 years old.","rating":1,"review_date":"2025-09-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.antonpaar.homebrew","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.