Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A rather well-designed application.”
Google Play · 5/5 · 2025-11-28

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2632728886

Proof data

Record hash (SHA-256): 1c4498b595e49abbb552a0198477eb4b7d239c9c996a40f234bb5d58ca4cbedb
Signature (Ed25519, base64): WMdVI99SUtRFlJc4FIs52HBtE26EbB/oZAu/zw9MaZERAGFUhBLWOkd/6Wr4AZkWYJC+qp3dqB78JSh5jCChDA==
Merkle root: 0ba1b80ff2165a62bc9f9f25c7b671d32a81a8e4f351546efb788e090f369376
Merkle path: ["1c3f18c859b6067416a90f9c9ee2b665712fed27854b2830689ad7d388ab3818","04a0ed671ea6fb62130b9e8a04c02fcc478e58ef0f75316cb90f92f6b90843e2","32f759d7a5d4d4c63e95cabd4986c4ec07cfa1640e34853388e92fec36b6aa77","89d896c6238629b0761f9cede6e5c09b0b3d95e63dce2d17ac288922f6f854b9","65a2e16a66603cd634e65c33eee5cd2141483b453dcffd7f3e03fdd30ceec6c9","812e57e62a72d65ed108ecea774706ac41b4d059c3d1688f724308e37e614b54","8bbfde45216db61b408d7c829f34f11f4583dae231264b66bbdeea107205b6c7","c280360acb9837b1b7dca53bf7c92dad8fce8a7168f1931e466f64efa6de9b72","fcf03dc720e7773a9ee6452e1c6db0c3411d68435179dea66ae187090ec839a0","93551c47e85ad9b47c25a5f30f3acbb98c8a408a4c8c83e1f3a9797646cbb255","e67551df3788a5c7e7d933a49c3f50406d9d0bfd9b6681b4f731ad37835b990e","61d7ef42138c7e71b58374b55bf962886e85230d672f424a82a548c27f3499fa","034ae9d01226d77eaba75b4d19165fc2dcb9e68ed53458f6ac6eae0fdf330abf","e3bdd9cd4a46c1886472a1771a5799292b1c8a1505c3320e374180146177f347","9c07fc5299395e9629e50b7f7f3c0b3bd92e7116744c8ce6fa87db9d24fdb3b0"]
Anchored: 2026-08-29
Public log entry: search.sigstore.dev, log index 2632728886 · entry 108e9186e8c5677a444c…
Expected log hash: ba382b40bcccfd5823af39360159e6e4433d6ffa61f32bd2b6c045e496d9f4ba The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787975494243","kind":"published-quote","locale":"en","page":"theme:findependent/quality/en","quote":"A rather well-designed application.","rating":5,"review_date":"2025-11-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0ba1b80ff216…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.