Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app requires constant restarting of my smartphone.”
Google Play · 1/5 · 2025-07-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2907673729

Proof data

Record hash (SHA-256): 5def8fa1b6b4388d8e68ff00fc4642ff6e1e146f0278a44147c054a4a75a108b
Signature (Ed25519, base64): Gv98g6LLTo9FVdGHELpFRHpRdC034g4SwUVFunz7mzc0UHRdvXsoG2eSW3oTNk8BPX4oGvBVowoq2AyVktwxCA==
Merkle root: b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02
Merkle path: ["5dee18696678fa6a9fbebba91853c41870303fea90b517852a04355d7eaefdaa","4411ee43336c896e3675162858f6de466ac6d63def7d6ebeb4fc15b5abb92c3e","19851f6b07d565b1d1a9bbc898df32038957c7bc65f01e7e8e6a53d2e31ef028","4f54952a8894f2c937df4cbc13a8d575b690d5f438eb6ee51e6138c8075317a3","4840d4c70574d01f374ba742ea9fb51565f845d1a54d4c535ba81b9edd86bf90","2f1905c154ab65c75af42cba7776b0938d5c854ac6c754d02f96751469ce7d62","c9ce67fb6b3c38b1839a0557ac92e6f16e5bced0c2bfafde0cfdff1c597f1341","5a61cf442783cb5cbe08d0021c6a8e1d5e4eb4832660b6220688d100603edded","e85df7e55ff9a9e6da8b0e6b2d8f26742e0a55757cd040d39cd4761cc3c729a7","8f1dbe36a4e9f53e38804d5cae08d4ee7edd5e01070f0946e6ea611eea58cef4","3ffc4d7ca09b39e0b9dadb921b06581d3652d248d7ed39418b832cb86366bd66","40bd9581780e3da9ba474021971a27a2b963126bf33adecf2de39d29e5b5c2dc","bcc0d977b8ab2060a87584efe5d0f5545e840726716d3f02c248db108122259f","6c299608515c69a03540be35865f96ca4932f3e0403f8f39fb0e1c2e2aedffb4","43a562d6822dab12c673c1efa0a3171d1ef69b949f676fb01847e1e5b56274de"]
Anchored: 2026-09-22
Public log entry: search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…
Expected log hash: bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1789969984102","kind":"published-quote","locale":"en","page":"theme:anton-paar/quality/en","quote":"The app requires constant restarting of my smartphone.","rating":1,"review_date":"2025-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.antonpaar.homebrew","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.