Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“updated the app, and now everyone I check the app I get the Privacy Promise window pop up”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1426c0479c82afda4bc52e46fb409aa1af1a09d64380a9a8e9c68e72cc06c04b
Signature (Ed25519, base64)
krO26SfOdPg8/XbTVo3IMptvP5z/YNjBngk2dkjJqeDY+/J+0yWqfPr8dcJmjW92LnaPY7wrsvqxQ32JAfK0Dg==
Merkle root
bdc4b63265a70d38726c98a51a2f6fe0c825529e253e2d0102798be7f72f5677
Merkle path
["143117260ad17c0315704fd5a2d310a393833626cae6beb4d1df1627f63d37c0","f9087ed9e83d8878a2135218702596f9e033ad643087c7be89c5ef41af5cdff8","bbc5657ef7ff85b11205195b84a046eef111d843b8ff30ccc9a7673f428f4151","15f826a4a1585f57aee6d8fff1d117284a7e2c490af9acd724347fdd2ea4e315","de9e12e9c07e0804ac3a479619227fc33eda27c13c9279ba755c3588ed33d88f","360c20fe6cabebec8045a64b9b2f8af8d36b1d6709c372a8da5c51d617a1eb7a","8b9b445f2deab1f4bdb758a540597eb4111f6d670ca27b19477183879df442ce","20b1f7445052346443ba231ed2e7edb6cbf6fd30b2454dd3310d8968115cd69a","d1155d31b9d647cf83066367ce49ae007a6e4a90fc9be2174d032ab4a9128abe","d1ea74884289637b3ee3444d49e393803ad0d1dadd2f88a6b48c2e03ab68902e","c5d822b4b5e1d611606d77b5f9a12a7cd55104cb2c1ac0425c282e04a35e2570","aebde396b6326cd6ef4fe2b336efcca55f425b58989be7e1932fe8cca3b8e79c","feb0254887eb1282778baf7c368a0b78d207e266f585e8fa28d1d23f1aa1f260","96c364e4fa4c79e3af24942939468d2bc4e25e66deb751a5352efb996b7fef36","c0ca68b26f34d8d7dffa9679f414d4de82a713164fc00678d7df4e235b1b6509"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2594047033 · entry 108e9186e8c5677af479…
Expected log hash
26ef5711a6b9de6fa8d880c18fe60f9d9918e495d6ecb3bfd46317eb69c9ba91 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787712098188","kind":"published-quote","locale":"en","page":"theme:accuweather/ordering/en","quote":"updated the app, and now everyone I check the app I get the Privacy Promise window pop up","rating":1,"review_date":"2026-08-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bdc4b63265a7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.