Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very poor app experience.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ffe7f9005f6abd96ac09f6ca2e16ec9d57ec096d3901b1b6fbe00d81d09a67b0
Signature (Ed25519, base64)
QycX5G7A/VRSDCIYhFBUiHa0aM/cV3TSbkZx8m+2NuDYDfWPNBTahcRTSVHtT5bUY9gQezJgQS2Q8/kTvXQyBg==
Merkle root
ccae92ceb3dcfba104788424188fa34a8cb1410075ff6c1a21fa513e89f0c4fe
Merkle path
["ffeb725be5b09a051e89bd822722ced1607c834e86dd8ac5dda46ea52b9ed3c6","ae49c764bb09c0df21752810c395c17ad0914321088c40fcbd5c37380493d282","a3a06f03d4fb07c9b787217cec84797d300bdd76f428551993377a7608878f46","234d5a79d1752d4230b72c2ad3fe84cab65effcff8f1da624cf2dc132382b4d5","c241ef8b773e3f5e1a956dbf2d6fc6e5e9d9798c14e27a2edb8527fb89b38cc7","ca95a96b84999031b8baba4944056a472d7537c71e103c498789ef5796b6d031","64fa431ec68a56dceec2f4bd6c24a73e285257d575ba072d21e097f16c8a5e39","ea440e225ac5641678ca996d3c35c94910ba00f11c556daba22144216130c00a","1207aa314b93e1fcdf85c1556431076cd4fddd9c4ea6413e34281c4c4d35e40b","82d3647695251b0bf39fa76d3bcd41586fac3c92b9b6268eb7d59a505cd6418c","4e82d1ad9dcfa0d3ace9851421e159f426bbe608eea35676f6b709bd111096e2","2c6aae0c21fcb52f32358e37c05f651b94e474293ca87a7bb6333f77cf7ec65d"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515282333 · entry 108e9186e8c5677a6652…
Expected log hash
af455e73500113c158c8df9793eab703ff863c9c98fe38560752c9a1772810a8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787139531268","kind":"published-quote","locale":"de","page":"brand:teamtailor","quote":"Very poor app experience.","rating":2,"review_date":"2026-02-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.teamtailor.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ccae92ceb3dc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.