Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“I shouldn't have to uninstall and re-install constantly for the app to know that I pay for the extra features”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 2682517241
Proof data
- Record hash (SHA-256)
162ab71511ced7b64513e208f640f5b287818ada7ac2e3fb048a85e75c62e84c- Signature (Ed25519, base64)
ZNFBRn3lDN3bQPl8Fnqv8FqpLpvq90d1hKyujvR/p79Ck2GhnQHNUUSOfWUI7NzNm7r3BV057IY421+qxZSEBA==- Merkle root
c280d9ed12ff4c0b3255dc7898b16f1930cd4119f42946bcb4cd68d076a2b332- Merkle path
["162c2bcaac8ba7a843ffb4373ef18521fab8b0f422ff091ab3cbc8eb2a68bed6","03dc38f940e00dfbb13d33e8bd1a784e9771f133f1996e87241d7c8752d8ba2f","3fbca05d332e40584a46b2e8639c9648dd29a5acc79dec27788487f57601c25a","55cdac6be31ef6dcc64f7ae3735d68fe57b06796dbf36fd9ad719aecb72af7f9","2471cda00e4111d32dfa80860e281bacbee82f9f3c40b728f98acbc390e8cb08","f728b9ee786898e9121c7f50c5f023b6e108e48d438574b58e62ffe72831dc2b","a784317e08e4e75d2db35c5ebfc3f210032cc7dddb555c1d6f9a4d6d80875763","7d14f4c47f59cdab509ac64d8c026dc1fb0b7d28d849974e7316907c48029c4a","76ad36586dfef2ac7f32e8dcbd918eefacacf75230c49507cb5ed0471e9535c4","5d2942579b2377b2455c8d27b20856548c126ace42556b0ad33f538d9da78733","851cc3041ec5b05d9c841e29cd1ca6d4fad0de3b36f0d3b7ac0bbf97a993e29f","c7280c15127cb14ec06a036a563a7851a4692e8c96907e84f3b9d6723a93709f","420b89a5765bf5e1ee3ca525653a85d95f68d0a5f95e1e3aa883275c5f706eff","1bb9d77697b03c52c52f610920bf29cd71b9d55ec5c24ed66e499e51e9290526","318e458e36dfc92952cbf790d510c87679554507275d835c305b6eafec626494"]- Anchored
- 2026-09-02
- Public log entry
-
search.sigstore.dev, log index 2682517241 · entry
108e9186e8c5677ae940… - Expected log hash
-
4dd627b405b5e14bbbc331be73be3f78a12bcfd7daf600ed87868080d5d2f664The log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1788316240490","kind":"published-quote","locale":"en","page":"theme:accuweather/ordering/en","quote":"I shouldn't have to uninstall and re-install constantly for the app to know that I pay for the extra features","rating":1,"review_date":"2026-07-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c280d9ed12ff…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.