Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“still trash and horrible ads spam”
Google Play · 1/5 · 2026-07-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2657480792

Proof data

Record hash (SHA-256): 1c49e2ec2cdece3a961382d8cf9a04fc26942e0ee4841e7a8721a79ac47c5493
Signature (Ed25519, base64): oKZ09aFKeEAcvZPpdFd0FsoryVRf38pbBmN3aMP0No7pdTbF/2ZkwUzhQb2uKRPFzODOQArKfqexbDA6YrNCAA==
Merkle root: 1b8bd208913fadeacc13aee96871dc2c1b9dc61e733c3f3400ab6ee0e7324443
Merkle path: ["1c4782a0b2d7f89db9df39dbcef75669fa84d5f512d6f2dea9867aa4e986c4df","29a290f093fbf0d0d6f15a77e7f29f53989fbeb2ed611ada1a2b0c49b820db59","c9247e93ef9b6d4e22f19a26e1e02cf6509a90d830f1da42ca9950bffb37fccc","0cc646946a472d3181460164b9a6e40a483afa3ce43f3450eb56e88477717113","54b2e87396933f1dd2c272b1c98fb2723134f14df3bff1c74db839c82dc65989","a10756265246698465286acdc17eff8d4cff9a77140cced126e09dc560b3c21f","3059c1952ec63fd765246d0d2a3a8aef69db5c4f1e584e796b5464fade9c6ce8","baaef7da6cd5b4f47b04b841133b481aff5bbbe5a4dc8eaeca5361f76dceb666","057c00f68daa95c1dd3eaa34d2e12edd8df8879c08592d686640b8c0827fee61","01679b446b320caa56745ab35cf6047f4a2437ba617205ceddf20b71feb8e76e","593f1e1d4564dfbbf2d8d402af661ec8c78dd41b8ade07ee82d8eac2a63bf038","a96a60089d3a33968e229fd6eac37fc507699f90a3a1d38779c0510d1c292d16","acf52e9a767b254023e37fc92bc6a0d81f036d70fec8df47db9f5728533e3c9e","8a5060efafa29fbc64db755e49cfde82194cf6467c7dda5949ed7b058f0a3650","ce07c6a4f0a9b6bd8c624cf5ab7198d339b314b8dcd9468f4437006e846aa076"]
Anchored: 2026-08-31
Public log entry: search.sigstore.dev, log index 2657480792 · entry 108e9186e8c5677ae7be…
Expected log hash: ad55c089e6140369414933a3be64660b3e37350199a02055154c25d6001c76a5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788145962339","kind":"published-quote","locale":"en","page":"theme:accuweather/billing/en","quote":"still trash and horrible ads spam","rating":1,"review_date":"2026-07-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b8bd208913f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.