Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Widgets don't work (OK button defective).”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
132c5b7beb9b634d7e60e123a848af40a3778fc8d9e3d0624471ce413241d934
Signature (Ed25519, base64)
GOJLQymlIvf1wmwXYraDCRsCUlAQSycoH81uhsWo14Lf9fuNMU3v8U7M7N8MsL5TONZDNnD3/o5+4lkdOCu8CA==
Merkle root
390000a3da07561118bd9d28deda7ce840b04bdfb545028aa4a507b52bf856fd
Merkle path
["132c5891ab74e92d860c6e9c8b72fcee0d6092ba8ccb21d0383a27ce7a24ee8a","5dc4f2737b61229b6099670262002c54f8a4a9e46c021ebfc51689bc19e0d4a0","f32ad62f251b5d13d421c06c69b28a82804a06ba078a39fe4aa58342fd71ab03","3849132122aedeb04cbc19147eb189614872713809626d4d398290cc23725f0a","181613e57041f5c6f42e3ba2d6629f1836b3751f31dd7bcb68b7e4d0d26d6c2b","382d80ce0de158959ce5548c6258c7b105d217d058afe6ed641637d371a72552","3c78cee8488e367b64a15f4218839f89ac2ad6e467a17ff5237524a34ff86f40","5e020a88fdd5c21d3bd77fbd5dd1d40baa4cc9d523d688493de223b6e7878cff","0b95a86c9be4356a52572df539ab052a2b80b059da6fa3372cdd858d315d70d9","2ed55b44c3344a29299abd5b0d3a59e22bd87eaf09a6301f1b31c267ab41eb43","65c58c07d62d610f128bed98fc7df74eb2b8aaa4264d4bf7743312899ffa63cf","5e0d5d2147fc79ed08cc9756182839650acd3c74e3e819f1544a56a6d3000127","4e738bca4cee064274a4b665fd9e4dc25fabcba87d43997253660def0e543931","9dcfcb4b16c40fdab070f8b5e8f7ca37473a8c41d403ccc54087a606ff297679"]
Anchored
2026-08-14
Public log entry
search.sigstore.dev, log index 2459832256 · entry 108e9186e8c5677a8f51…
Expected log hash
79716a7239e07909ae68a0cdb6d9bccdc01078dc99c63effa81b2a3fb90ae394 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786675140122","kind":"published-quote","locale":"en","page":"subtheme:meteomatics/quality/widget-functionality/en","quote":"Widgets don't work (OK button defective).","rating":3,"review_date":"2026-03-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (390000a3da07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.