Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“updated the app, and now everyone I check the app I get the Privacy Promise window pop up”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
695d74399462080c4e2b3b513fe5dfa5c163c197864a7264cd41c378269b7357
Signature (Ed25519, base64)
HZGtr3fI/wHaU+chIW+JtEtfY1PQqD7TkqOjkkszPzK5oD/D0TRuNCKq6YsWSv2+oYRn7aUb+XhnxlzRLDgMCA==
Merkle root
cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path
["695d470ad636133c75c34b5bebbce4325f6ef58e1dafd563a123054119aad22a","94c53b2d7abf6e545edf42568ea130d4ab733f5bad0b35affd596f501763b3a5","06d6f1998b370aed7e3765db2618230f2b67fe4c56c18a9a7b2c85948741df48","cf7c0b5373c47e7a91c382d6881470279750742bf38cbfdfd69034f1d6182c2a","3f8e766c9d278fa1a55a4324508e8245cea8f2e29c2db19a1e662641dcb5b46f","a368dc7e51ef8b377302ac6613286a817ffa565faf4640c461cfed136513d1fa","185887eba1b9497aac9609b1c0744add6db9e03ecd0b759dc6411e7e942df82d","fac90bad04a71275e5df056a744de6be0c618633ba316975cc9b397047f1e60a","f3252d935beab3921e850013e4f43a9c892a4cd6b6363f0f7529131511827606","32c23699fc9f4bde522c7b3ae0bea5dc5d88a5e46dc72c27458444d2313f1e8a","30644cd4d4baf1494f3006f280381dd84f4043211b5ec1d3eadec81cade21db8","d29846d305ca93ba91cb7154854585f35334e65b72562e64a3ca2a46c183180d","58b1aaf4ff68687e7006533ee52afa6414f635ffd828ae73a306f5f050aad891","c7065531c3e7c4c7309e4efe4674330d1f0c5150d728171b8966a352ede62d5a","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash
8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787281943761","kind":"published-quote","locale":"en","page":"theme:accuweather/ordering/en","quote":"updated the app, and now everyone I check the app I get the Privacy Promise window pop up","rating":1,"review_date":"2026-08-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.