Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“even though I already paid for the stupid app years ago”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 2657086861
Proof data
- Record hash (SHA-256)
16c9d533a1844d987b3b2d9c6221d484151c392083a1cccec4899cfdd304a967- Signature (Ed25519, base64)
KFwjOC5z0kZqcud4z7oYgIz3QiP3To0t+aPwoOyE0cIKP+EPYN8SXNyQkVRUjeLG3Pixg0BI02qypGS6uy5sBQ==- Merkle root
82972b26bec55a4dadeb51e0ef4817fd240d012a15b1107cf4ff41b6bf857f2f- Merkle path
["16cae2a7351b94a39f85edc4fb310b32c51e8460ce17298b793541b3e1617e9c","9710e470acd3c7febaaf9bfc5870a2bff3a378dd5e390de1a93eecca967d5347","8152cd50f16f73232a7b9db5b4513d5ef11051c91c4668874d43704160c77459","2d208db0aace79e369f8b5ffc697fb9ddf0466a01c37c1ede1a29996bf48c880","cc4b48c2a83a64988f9ed6580a73c16cf0388cbbada1f202dae7cfec2742346f","264a8bd8c4754bd9eab2b45e4bbd8d01bfef681f028b7263781e7a70e87ba2ce","4cb3654a9fb6592bad05f8760e185478194dd570d6529e16329dbd2dceda74c7","196daac6db1e9cf3d70aa585a7f929456837ee397450a98a874f8d02678d08bd","b32548ba531a8a87ca1cfda85ea95670d14f62439a27201b14b016b88554fb6c","1886186b7a5f84b0d209e08a5050d763063b4ea5c03bb1c7841b34e3905b90a4","d24326989aa7485a05a43a1a1658596f3d73ac1b93b1a0b026ef257170225a94","bae19cb10ac53f9324ae9d701f1e918fc75e9e05c7a57a3b9c634ca6056288e3","6b680ff8f968dd80e3ff74aa3a067ab4e5daa264cdad81a3262bacd1ac87d56c","73fbce4f3a295bbae478090c5a38fa056d3343dfc0fd9542392d2ae79d50f95d","f4e711c857ea1ba2d5a944450f4184b26f960d0cb1b2b63658495fa9a35aaf91"]- Anchored
- 2026-08-31
- Public log entry
-
search.sigstore.dev, log index 2657086861 · entry
108e9186e8c5677aa85a… - Expected log hash
-
260fef646429d420c2862b4a127a9c4a79609ad273de18fde93cd5e796c16b27The log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1788142990944","kind":"published-quote","locale":"en","page":"theme:accuweather/price/en","quote":"even though I already paid for the stupid app years ago","rating":1,"review_date":"2026-08-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (82972b26bec5…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.