Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“AccuWeather is the least accurate weather app I've used”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256)

6430eece0102dbd28002fade4025e06c7ee2a9fc84db8283ae191c721c7753e0

Signature (Ed25519, base64)

fylFfBULQTwzDuJTuViJxvTb/b+6iz9LMsVH3zHqEB2EU1RRgY0NtSJe/nFaj8/C65Qatg0Ds5Wc8hGBLbuHBg==

Merkle root

13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725

Merkle path

["643250be55f8cc03f484dccb00f71683454242dc63e67916450a9c6e20f85366","ee29d28d5e45a99ddaecc4da7fb7b9f5c7d39592c79102f65b0f6f8a595aff46","46ddaecbaa8693d60ec0c42d48c095e2b7517827c321e4132c23c89a5bf805a5","0106e4b80ef2a4f9150a7dd8534be7222536c059cc7d33483b3d35d0c09205dc","b9f8b2e471cdbe83784d3112bed12366ddcd6e77cca8acf0ab87fa645b8fd6e4","0f0d4d507bacc7023489d353aea14fd8460aeb56f60ac9be0ef95b0c9302590b","02b32c1d859264ca1fb539f784d5dc54e662f99d9d394df15137d8405ffc270f","5a98906674e341704b97342213b2b73e23b051b8967ec7e6e796299e907fac68","ff6f455ad80b3bd106d7de0098e79d7aa5f30a5700ef3f5adf690f75d3e90354","2c9bdca83d45b5d2dfe9aa295f8f5ab6956f32a98bbbfb891782ffe1c0cbb1a8","4d9d045b34f5b7672bc513284ef1e8c359d4682a872efe9a6e6830ee2c7ff7ed","2e4cc4cc9f254585d592ce310b06ef87cd96eee21f75a167ff015e1181264220","a85948d94666cb760325015d876c34467e4e9a308fd736b88b45334d957c084f","8794a267e94c305c4d11faa8a55bb3d3523fb52e75ea5ecdc366a6e906d9f7ca","bc9aae2a90fd8d311435fb1459ac7953f7f2923aa1b697bb0b40101796e3503b"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…

Expected log hash

44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787279544668","kind":"published-quote","locale":"en","page":"theme:accuweather/quality/en","quote":"AccuWeather is the least accurate weather app I've used","rating":3,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.