Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very practical application”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7961759894ca05cff780d4d2945dc9b6f8560c99924a083f512a3732a83f3ffa
Signature (Ed25519, base64)
ggXtg9boUR+JS7lR4EdQ8KWYBj1wMXfjSLnd/AbgtFBVoUEJipq9+y4OwThSDaEMS1Bikb/eaz17GOpwNWJ3Cw==
Merkle root
825dbc6ca55f00c6c81d8de0f7a080bad31b79dfa0e721dee7ded0e9c294ebb9
Merkle path
["794ec5745bb9b5819625a5cb5b6d2f760cbaf770a382cb3e9cabd0ddadfb6c4e","3c1a80fc3ce4c19fd76b423da80ff629a9f8d8ebcfd869a95b42b8c1fb16a52d","b7b22dafa66a8830cc5083eafdcc0116d7ec68d44af2205df3a3374f36b5d913","e6ccc0bb4c97203f6f94ef47ddce321bbf60b674ad99e963dd113d46bb369b52","0d5c5f1834e6341b8ba5906cbe490a2f7edd51e59ba529d1a109d8f6e551af9f","ccfce01b0d32cfcbafaf82d198d99eb3cc31582757a6d9e1df0a0d71e0c88396","ef0a1f98b865a00e68bd200f5fef38428ad966bf0e717faaf55b1a73f84a7254","1df32d01e8f3013bad77570da02e360ab7fa6fe2981aeff58eff62f420c1faad","de24de5de2ae587b64436b946de9026f2b2d9a98ff52e1717fc1ce096e090e1f","61463d9c273a87ffb4551815085ef5c7e3e9aaf3532bcf2ec247f3657eead7c6","de951ce76dd7c49e1f0e42a280754491531e05d31d210e871abc199a069574d4","b21f6fad7bfd243a35e3d331c6476f7ab24e9efb16bb512123e70fa3b40761fb","30ceb990dbcf69c7449b46a359a0167ed6280c6b62f1ee6cb61f71251c1e9d82","04c4bd8a9ef95bf5648c9d023612bd1f2446e83a6dcf83e612d031a5ea30e90c"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3240422411 · entry 108e9186e8c5677a0ea4…
Expected log hash
8667b0db28913263098c19cb6387cf64b6d68b1b8f2c4242d3139d96cef5da0d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791861703078","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Very practical application","rating":5,"review_date":"2025-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (825dbc6ca55f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.