Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I can't change it”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4df429fcf51fc4cde544393b9d45c79060e6df4ca03f9439f6a3e1c8d80e7ff0
Signature (Ed25519, base64)
vZrizQ+uNy0wZHotMo0my0yZys9XprpIXUDNspssIAX49HvqsjnDIR+qwLA9AkWTLcgy9de3qEXCWoCBj2nMDQ==
Merkle root
172a3e0b3c9f8b02f52318e01ba6beb899404e00e91c15eebc4dea38467e1404
Merkle path
["4df4cc4b923535dfb7ca122386d1130a7fb094d71353341669ef78aeb1815863","5f23552f4538e9ddbc3c8c5ea123784066db33ebab16b7061fd28789c71fe8ad","1134a56a002058ef43bfb773f94624627f77013e43b2ee72b81667b366cee1e9","b286e0a673db3c29e19629f3beddacb2a3b645d71184d8332fbe835a344fdaf8","15406a07abd93f8bb29888c497e8ce86217354459f0e003dff102eef01aa4000","a873343f3dd921d5c55b14aa1c5f7cdbaed715934fb7353410b355ead587d5b9","90a88846c9ef2274d848e09f1f7d0a5d0388c2bd1fea1fdf081dc731393298e7","44e13551f0adbd85cb58fd8cad3aa9ba1377910b563a429e7c1d39e37389592e","482eb4d7594f09303d2649e4620613f25d76bf1d8913608ba603b3906c03eeed","da6cce1aafff38ce37e2240598dc9784266441b0b5e30459e4c6ad042e54f54f","5b372d86dd0cca8d96df653c2d57eef4f5a97d7d45675e57f1d385f02424c6e9","18ddb93ee737dd6a45fcfb9d315a84bd1fcd0804b3ba791cc0dd809ff1563aa5","09afb18deb0eeaca577b5271c183d4b7283e7366611f65ab999ee122c433eef4","b2e250a62b44b0b9c303f91afd3aac8852fa6af504d7d68ed736141a3dd71161","7731d0ded4f51d151ea3e84474d1e27a6279e8756420c93cf5fec0abf7f11add"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543025731 · entry 108e9186e8c5677a8971…
Expected log hash
19ecbe4a66d8adbd7c6057dbf6ed9be73485c248dba1e0c595279a908b3e8bea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787283443958","kind":"published-quote","locale":"en","page":"theme:accuweather/quality/en","quote":"I can't change it","rating":2,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (172a3e0b3c9f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.