Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Laggy, takes long to load”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7b40fb638164869070bb7288294283ab8eef51c8ae0bf13a8e65ec9eef4d6f62
Signature (Ed25519, base64)
y5PuWIq4oYv9mgs8xxc9Axa4LBfzQxJTE0n8EzEq689iEBwlhq4fMVXu3vvDqnXK4t/4Wkn95EuTfUs36z2PBg==
Merkle root
1e69109d842117168677c2c7aab9689ac78923960f86fb642566271a6ebec358
Merkle path
["7b43b0cebdafb88cec8bcb08d59ff4e579ac0039db0c7814fa54b030d5c38063","f82d320afc31057798a11d61d41e27bb523f3aa62f3b408175949f4999119aa4","db22b7058f9d9f6b2e2bbcab6c381c2816a7d363b1f745b40e3212e5fdb352c4","a84cee5f825ac153c29569fe7ee0a485fea65df055be75bd25f7490544560bb4","51a35505d696a0a0864654ded2c59e949a90b277143258414092bfa79b78e7f7","d1da72749551e58536c087c72097a81fa0323e500d71fc127add25c4f5a5b69c","eeba0acd4bbf73c5aec4f9f8abed882399cc9e45ebff3afe1954f14da031e560","41912c0610a76611f510cdd75c38bac7dfe47fc1b6f440b23183d1d3b1739279","a8d61097b1d9df70033a4bf61dca7a67ec9240d92a0d04a2199fa7fa9d863a86","3b706d8423298aef9526f1d882ca0bb16c68a5d79e937e07577fe4bb0859bcc4","15103aef99a5460253364be2c1dbf58f5f379d919f62e1e9111cdf323e7e7391","daa54a68d6bdf696fe2ac6927956e2ba06c360290c9fb42e6096291c7d671ef0","4415f435576ebcceac3b3c0977d023db135f0518d5b58f01ba0fb57155fcb406","4db0e65440b78c494263fe6b915a75fbf2b04ea1cd2fed0eeba5f9cb4589aa37"]
Anchored
2026-10-15
Public log entry
search.sigstore.dev, log index 3258673097 · entry 108e9186e8c5677ab832…
Expected log hash
c57cff5f0f2da5f1c24e09823c0cd10c485830bed55f44ffe5864187f8e896d3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792033864449","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Laggy, takes long to load","rating":1,"review_date":"2026-09-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1e69109d8421…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.