Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sorry, I understand you need ad money but this is a privacy nightmare”
Google Play · 1/5 · 2026-06-03

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514851395

Proof data

Record hash (SHA-256): 6cdc05f4c7ec63cb57e87f1bb95ad214f3ee8e6a360ff2f937322fc987d44d43
Signature (Ed25519, base64): M/r+3R4Ct4QbWv3I558NkZ4uUghbVwva4Jh4f60NsC9lZsFZtQM78D4vQvTAkcJzbCqp4kf65kiKvAydiP+CAQ==
Merkle root: b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path: ["6cdc30be92715711c716e3314686404bcb7c2f4db10a345571b74360ebf79b27","c0561d97abd16628a8c310efe800e3d71c5ca784cbc33c01664ca1c838f35451","a5cbbbe481480a8547ac8f688202b8169f053e452dcfcee87e1822dfc19ec20f","f48eedc7d75588b8d3d0bf06933d6bcaa9915d457c6515d50668d7d63fc191ba","cb385c80f2207d8721a703bfae96c9160aaafed7476caf2913a351a72d196941","6f6380ee30ef1b2eeba9e420aa817e7cc1668367eab4de357a69b448e1ce2316","7dcf1d7fefb54d002633ca1939d0f594dddfe41177587cb307136b5d74058080","486110715f92663d4805d2974938b3fa7e50d756321e5e18a7d4ea6d4f80f90e","84a2bf1feb4fcf6a950ff78603914acef2f2d3f1739479e54a102b24079b6c1e","deaa0a1fe57e9b8932e9295def1bfaabac6e1d81f62e809cd575c408aec57fc0","7281f279cc9a8452670fa9a12ec35fdae2e72c841be32857fd0db89930ca121f","04087565ef2bc2296fbc1a825b280fdd722bb654bc60f0b5bce5b348a7793e47","7683d5d7c88ecec7a3b1a5734816ef1b47ef9cb2b169a45f71d75a399897983a","a87bd939a3ad0796a8d580dacb2c37af7f713a77a0e4e7ca6c95f21a1e1d62cf","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash: 687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787134378129","kind":"published-quote","locale":"en","page":"theme:meteoblue/service/en","quote":"Sorry, I understand you need ad money but this is a privacy nightmare","rating":1,"review_date":"2026-06-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.