Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The lack if widgets is also quite disappointing”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514013184

Proof data

Record hash (SHA-256)

0fe23e67ad17c9cb21616f8453f8d2f08886be7f9ca96f22c6388e6d2ac169d3

Signature (Ed25519, base64)

m/0mMinTzxdHpX83tNxztmJ898BSsyEYBUFOjy5+/hEWm0WzNP988FrvvuxyJLrMiugy8pXSrWmlGV1QoUFrAg==

Merkle root

677e672fa444dfe5152ab91687c577772e13723ca441b5c8063508daedacfe44

Merkle path

["0fe5e94ce5e2422e3a8b667d82e6f9796cb89f26d6cc373068f5f5d676b9e0b6","2365be2d9d79aee173a99cf889cb2abee5002c5904386cac8c8b6ff03d6ce9a9","8d602d1c69d6ce9011ac2cf660375cc2cb7c5b2af5f6331b7bf56fb8a378eeac","2fabde225e2c8aced0e330da5e04793b6a0505eda2a7b49636dbc32f233779ac","c71070b397342f5d164a4b115c85fd6e0097dbd2bcad7bfa4be06920b405265f","5008ac2ed60683ea42064aa1b691f688a3785054fba96a61250e403b87821f61","3179c49b9f9ab6d9f735443cf26e3ef23a3f98869384355e5912dacfd38d9d84","dde10e4bf7f2145e4d02c49be9f462e663cc3b4340b5b249aaf5080bb7cdba58","7282dc1669167ecd549397973038ac350ddc6a19ff35bd382d26e7b40f9a74a9","feeb6c53b1e2b7d684551737ed4bc7caee29ca6542b057611be49194a59a6abf","da19ce813910603e349c88751973b6efe017ef75e9a7d9ce5438ef98891c86ae","cfbc3eb809c4500188d3e4ec12eaac8c45175062366fe7032901ada41eb5cb0c","bd6e996c146ac2fec0eac3e8c06d1c7b69fe86b69de929b1fa7a0fb372eb8d03","4160c2bd6ca5556fcece7b88bcddb2c951ca86b46a4df6829fdfab8c09bafb4a","188420cfe03d9830600dc87f84622c41659cea53d9b8db8954bfc926ce1d4dac"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514013184 · entry 108e9186e8c5677a6b00…

Expected log hash

a596e5a342226b61371cdf76b5c8be8e37a3d00e7ffe8f7b0b550e1a8d1459dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787122978040","kind":"published-quote","locale":"en","page":"product:meteomatics/weather-widget/en","quote":"The lack if widgets is also quite disappointing","rating":3,"review_date":"2025-07-02","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id6449551642?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (677e672fa444…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.