Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Does not indicate current tornado warning which is unacceptable for a weather app.”
Google Play · 2/5 · 2025-06-04

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2632227861

Proof data

Record hash (SHA-256): 0ae5607709a54d862270b6edadabf3646e83f4295d3509043abc59804a3872e4
Signature (Ed25519, base64): QnFGQNosRWIMGxteSG1QxT47Dtapa0vdl/HdcIiO+u4/BUXnERWB4nh1f1/ZwT7zZKPkj2MSge+hyBMEWfiRDQ==
Merkle root: 9809cd1f65a3d4e144579745a20f7882b635b7ad9e75f8b31fa040fcb7e74470
Merkle path: ["0aeac37e2ebf4c87290bd086144eacc8d75e142be2949a2feeb6f7e6dc17c164","458f128583ad18e0a67962d7af14bfa32c12d7474e9493d2a2339b1e7d8237ed","00d9504557c086e17a69c8f327a3ef77f308b2502e1f6789d9c836ef177f611f","f1c6a79b15e42f5435e0448df57b54dbc46c07724f277a418bedd4261cbde1bf","938fa42ea9016f05722d669cf6741eb8acb07c3f43e94cd65c639ba8f841504b","fe0048f80033a01726d1ca5d7bcd0ddd1609874448dee8831f06773453554370","a81ef7bcf71349454c77e69f66a7cc2cfa2bfa00fbb0e6099231f832aedb1dfb","3d6677cac62c6389860300677cf8a2e63138bfc63de89933a6f99c3733976473","61175c5283968ab212ad167d2f0e4a3cf4bbcfd9a5ed1dc63aae6a8218ea8553","e7c00e52e8bbd63004daea82535ec5c58405890f4207eb68f6995c95bec11a9b","d27164a0d2c9fa051e5bbb9a8cb7eb22c7d7369029192ce45e4788f4a0e29827","481f7ef0a039f0ac74ac45e941b1f75812097a8a1d86b01a2fa72df921bd5f85","c33a9efcd0298a63eaba2136cfe18dd1517727e1b9e9bbb60122216df6f0406f","13cef35a80378a74af4faef102936039d3a54a741843391bcf32134dd8e61270","5420b3c3f4a7cfc61de84c757928b42517e167d282e291e38912f2169ce60350"]
Anchored: 2026-08-29
Public log entry: search.sigstore.dev, log index 2632227861 · entry 108e9186e8c5677a52ba…
Expected log hash: 8be5978cb1be4c5daa434c41d0072ddb211c64c3f93b137b58c71c55ff15eb8e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787972611008","kind":"published-quote","locale":"en","page":"product:meteomatics/weather-api/en","quote":"Does not indicate current tornado warning which is unacceptable for a weather app.","rating":2,"review_date":"2025-06-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9809cd1f65a3…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.