Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Points are pretty useless now”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fae8958b436600890da51f53f1ccb5a965d2c04d3f53ec5a201942ada0472b47
Signature (Ed25519, base64)
c/5ssLHCLmiSKPyrtvlSCVb40SJ+D2WVSVFhSYQwf666IxRZxd0ZmUZYWhfsQwMnKV6QZK51m0PkPjwd+oTKBQ==
Merkle root
30b81ce96f52ff8c37a1dce6a2cf1045c2f51663c1ddbd5ca071d040e32c05d6
Merkle path
["fae7d9558cfebc805a2f6a5334a989db217c8caa21fab5199baf7a930d1bb619","d71fbe06a518c866b72d67e43ec9db22d6673e3de005ee5fde6b8be851002c29","495063fcd14a7790f50f9510c748a4c34988371c6ba6c66274fa05c9a9166afe","7f28588c47bfb45b763818f8351574fe5283b9697ddf734908696adcdc32e85d","2a79b6b3fb400d47124540acc0c1a462fcabdc6df99e554d55d56fe5d5d1c612","3df6c4d8e5f9caf221de888af43dc056db36efb70d4a57a6f754032bc69c7e25","b9b107419dfdf031631862d24c2d98c4eb160fbcdff111baaa1ab61e9b16e06d","4e7e6f9864bbad954c1a5cf4543e07561761eb051c8abb6b12f694a0252a5d4c","654a64c482d94c22fc5489097aa04f203e1ff17595b91e750b902bd4aa5e36bb","41a198d500e128ce6890bee16034c47f3b268814511e406c747d79522c27e065","1b7d75218409e2d057a41d7e603bd8e69b90f1d5e23bcda4b721d2aa8f99df58","ac7da3171de91158bb860ffda57540bb145d87d9e3a1a9e6f74d9fbf7685b1c5","4281a29cfd232d37e0fbfb8aa7c09e8a557b1a863bf1a3c9a19105846e567fa2"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515243153 · entry 108e9186e8c5677a8eb5…
Expected log hash
314ca716b1ad71ca29fff6da960e81a719fe30fa5fc14d8646acca79a7c09353 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787138594002","kind":"published-quote","locale":"en","page":"brand:swica","quote":"Points are pretty useless now","rating":1,"review_date":"2025-09-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.swica.benevita2","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (30b81ce96f52…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.