Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Cannot comment about the features of the app.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2647203528

Proof data

Record hash (SHA-256)

169310995e23e8e2be074f8f460ac5b067f639425f4161425967813a5c3c4785

Signature (Ed25519, base64)

cnw0haypSdyl8Uc8caTc+6ZvlCe3H5DdHlf8YRZgXadgBaD8cRQShLP1zXdfGqsyhByi4MhvaJ187oMCfbvtBg==

Merkle root

d46cb1ae251ab4eb9927c9aa49346d5122e0972e95f3de0bc747783e39627b20

Merkle path

["1691358dbef0074e1dfee60932e4aa0068c564f9d2875c827c64d6b9fdf708ef","d149a5eccb4273293cbd72c413b7cb0c07f3299b1aa5492714d5f10361037f6a","b68becc2f24bec48bf67c03557fd485a3af4c31a64529ba0a940a0d0e73f6d03","cffc9b79923f1c5e63532daf7f395de5ceb198344ba86477b676c5e74d146cc2","ad5a40b766e2703cbd660ffe576999642cad477f8acb10ef7e01f27569798d8d","beb4535447eee16d220fa2949571131aa3c759319203eb1900a5997de4f0c59d","133b63f6eed30f2038d2ec9d5a4dffa7b07a819e26620a45378b5a177610cbe0","8bba97ac872b17e5a6a92962be43e5c13390281a91ea324f3a3f1a6aac1e5332","aeeb7371566f4cdc6b0426720ab93129742e269c0ce65f405dca681bf72a2bd6","8338811fa2e7449747fb129ac49f0e2c95213661e02fb5426028276cf2b289fa","7caa300fa5874a04e714f939815a293dc66deddcb792ad53b712056c1593844c","6671a6239d56a71b0a1b95b17eda7299ffc41025d62ad28f06858ef416c422dd","4a14f55edcdf62d56fb3b41ef84c414b51d0eb41f374564376b157da5491ebe7","68887c94a8ff3f8133d2482ef2c9bbf8604123a7794f1bb2158536146de3ab6d","0833ef6f4a75733be647d99ef9b7298f3428688ff5df279f6c54939387fc0497"]

Anchored

2026-08-30

Public log entry

search.sigstore.dev, log index 2647203528 · entry 108e9186e8c5677a5a9d…

Expected log hash

7105e6eba7c1fbef8f8eeceb10ea9f96e5a1584032fbe98d2da1a28ce036bdd9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788034732495","kind":"published-quote","locale":"en","page":"brand:findependent","quote":"Cannot comment about the features of the app.","rating":1,"review_date":"2025-01-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d46cb1ae251a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.