Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Doesn't give us a choice of language”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3161668256

Proof data

Record hash (SHA-256)

7b429365656cf2851c82bef1c58e2647541e57c8c6d91270a841ffc3973c68a9

Signature (Ed25519, base64)

o6yw2C8gbYKQ2fAP3cAuZFKjoSye3ylYIHZEUj0nbTI9wKrkZoKb1ZOGYNx847pqloukmq1yCfUgmipIhsPYBA==

Merkle root

dae11b7f399fa27d7e91aa4463415971ac3f4413815a3c608e4b798805e78c60

Merkle path

["7b3219f63b3df947029fbd394749c57aa3e40330bb7ae7d4415d50f329c93a88","73d7d2b19439ac0ca65dc0d265d6fde1a3076a7345f5dd56814039f12a30dc2f","fd39d03b8506922948715b11b98f4c9a48a32f8079d4f8cb639ad1bf4d2a624d","575d8438547a6c17c5db0be7979e4c93a4b9b4612ddf1acdd3af7b23d8f8c876","acd5c449f6f787078ef83c4f1ea957d7658bb93119b230ed66b884a65828dc2b","9898c57ce1b549e0cebe5c7a83eb9fd0bb245568876d392cb55562c16b46de9a","c9757843204961fbb7a3d8661c5b2f177ddf54cbd730ec821abb3325765e1fca","caa8548bb6a2e2b98418a7215a71e2bc9e505c2e792ad24aa5eeeb39b8c09962","2f6e2e8e9bd96d1aab610070765b702e340bb0d674744bd112b9f6d3ec0dff01","b4269574f9f923c7d545b2e84c315b398d9b6f5bbfbceb93c8dd7df1b9707563","4b5b003255858730c8c2856ec69f4759ccf2b44aa13a2c7594523902fabab4a7","ee70578365d3da6691fe18696156b71f94fa78205242d89b8d20089fc6308b59","e682c5b8531aa0523ade0f9090c01607519f74c84ae161ab5a97d9ba76d9ca16","cb89e28452cf165e4a31aff66df6db708b33cc82c83ca8f866741bb4fc87bca4","6771b856bc54b9b41031b35ff7640ad54c5be8f800e1967d73d242437a9508b8"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3161668256 · entry 108e9186e8c5677a744e…

Expected log hash

dbaeb9745833827bd692133822ce98bad4dbbf6d52d00fcfdadfb4c533d214a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791537031439","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Doesn't give us a choice of language","rating":1,"review_date":"2025-11-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dae11b7f399f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.