Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Constantly have to re-login each use which is frustrating and a waste of time”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
55fde76da4d7a2f4301833843027d26d8c0dbe20fd4ab672df84b50202a088db
Signature (Ed25519, base64)
qb7dddhXzaRurl9Db/46O4aEjqDbCxO6NGM/752QjPGHrL53ZrfvRrE23mDjMyYY6PwzMm4yycBXuGPPETFfDw==
Merkle root
adea50978c44b7e5a42deebe1f6aa800128d7cb9d40a380b6d66c0a0412d1342
Merkle path
["560d0f8ef600fee820a90d043b4a4af0ca95e986d0effbc73b47aebd4d763495","02d6d472d85d7d953168db06a323fe18bea3b0a57ac30a08d6684b95e42d4e94","9d7023c73ebec660faf74d0e05ac4f66f3a7d72a0e7098721e0b2a8c1df2155e","8f43f114a85622e5cc4cab66c0c270d039d1eaaa0a441ebec93e071bb70fa3a6","ed91a74e08cbf2d8ca04eb39bd248a8e72c735c1f4359e042c7232538caae086","d9c12c4d728a11c0855db4cc116b8c22a239b85cd6c724176ad9fa5c39f5271a","b7f78e185793449dcf230cf5699f4cda2b25e567cf48a1801207a56857c38ed3","cd4c213cd8979e66f460932ab2bf9cabccfed7137f61a03e8d1e59384afd3d7a","59557433a743aa84d6fd6431a0ff181623b5193715dc02c123f3d9b5a71ddcca","d5029178df5bd028ff89eb64e7c39df1281dc794009d09ddd5b7fe67ccf3b864","da28a2ca35959e990aeb907d812e94e38d2b321ccfea03efeafb443ace5652d0","ec5dc6b9365e2d75ae791dda95e55fa72afa9395268dc6e7da140430f86be09b","b33a96ef5b980f3655206c9db064bb6266945457b59b4b98e2e19f698343d0e2"]
Anchored
2026-11-02
Public log entry
search.sigstore.dev, log index 3637467057 · entry 108e9186e8c5677a9713…
Expected log hash
e8a3b7eb12262f106844c69fe5603c2e4003589f206935cef50a87cb382b9cb3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793588145516","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Constantly have to re-login each use which is frustrating and a waste of time","rating":1,"review_date":"2026-09-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (adea50978c44…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.