Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything is excellent!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3123908662

Proof data

Record hash (SHA-256)

ff544ea672efad5ad5c076f5068cb390103b2cf4279f1f12c1628b7b111477ab

Signature (Ed25519, base64)

XzzQbxSSMSUoO/fguNl0NRuYyE3o7GhAQOFxEXwuoXG/IXj6RopeGtlOZKnUR5izQ7IwFUyHyemt654E0UYRCA==

Merkle root

c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3

Merkle path

["ff562e3b52b27871897da23851c1b07b95afeae2705c1061fa4c068def460602","676f8b2ba448e0fd45bae8e0465b60fe993c9b465912fab045c7062df5c9a9ca","6d663f19ac75f051e0dceafafd327cc47285b5537fdf2f5ffd5701990fa81b4c","9ee45ef2ac28af1aa3d07d40656e077d33c882fa00d3f08447ce6bacffe8f402","e958a343c056e5791d69c1b9f25d59eaa768317a9e82dbbdf2254d8a21271272","4d595be72634433f56dd08b887fdcf578184d8bd707450ff73358e69d71c2d5e","e84a7e768064206ef274e71de386051597032f5fc5abf9d1e52d95a9414af462","ad446164065ab9d3706814d00c8721fdcaf2f83d7e8db72aad5f37a1daeba43e","daca21e4a1264c55c8fd17614fc60bd427ff8b2364b428629cf2fa8f1c2f8b77","4bea0fa1b34969b6a7f187c889fb861188a82e26801da59520c174e9e74086bf","4955daa1aafdb91c5118f88984b08caaa27d82fa33527dc7a00c96b89a3407c1","7a50bbaa74dc72157cc791442bc1f4313c283e49c9af342f20608dd7e776cbac","ea816c3f8ecd74fdcdc9c068bf36a30dea5aa6d104e982532f9e8769ceaf3fff"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…

Expected log hash

5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791348381030","kind":"published-quote","locale":"en","page":"brand:schulthess","quote":"Everything is excellent!","rating":5,"review_date":"2026-08-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.schulthess.mobile.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.