Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“But it doesn't work anymore..”
Google Play · 1/5 · 2026-05-03

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3273342496

Proof data

Record hash (SHA-256): 7b49bf2c42a81c14f3c3a67b928f75ffb35a50f749439447d026c61472248ad6
Signature (Ed25519, base64): gnRABNrn29iYgoKkx6T8QLHOHOyJzPUSJA8GhR/vSOu7qbCWo3dTI2n9RHEkBt/OH9QL0qGRsbl0xY7H4FXeDg==
Merkle root: a6a2b4c9d7d1eafa4a3ba3595aa08f11c105165de84940ffc059f837c445104f
Merkle path: ["7b47cda4d3186bf9195e8512f5bb68e2feebb3716991b7b7dc1f2937343ddf6d","8ff356940d1279469b7dd5798f4df5b47eebd4f94ada5f08e36dfae3585daa6d","1350e2184cf2b0d909a20c63ac40b260b7e5e0084242cc80dde471ef7a012c0d","0eb37c13d5eda2ab159850f5e475db357d8eeed02c5cbae6446be70250d1a508","b08e73b866d3a3358ccb680e3ffe44300d8fdce9a70b1741642f9778ca49e6a0","e46fd2e348d4b55959fa942f85ae9f4bd95213ca5c975e62d69c92d36edf1bab","09062907ef1e3e8f1feca19ced7fd93b2fda302c5afc41d64bd984665fe92c61","ae0a86a44b75cd3afcb2e9060cb6724391d92c1f5f2e4e301e9653fad0e4eeaf","672ddc9e6b9e6812e86528ce2dc65e1c83863e3c4b500ea53b6095ec4a023bf7","ad78de3865345401e31274f3a8e3a5c142a44793194689730077eb4bfc6045b9","aedc7327e78218f6280af7155f41fd28935caa7624f83e92db04a2edcd09644f","2303dd26cda116a8eb0800a8bc774bd2f257b5ec2193ff1cb7ee613e1177a153","fff493d2d253462ad7d864285021e071d3afe7ac9b0c40aea8ee31ecda85a42c","d9b9cce27629bc902030340ceda068fb90d53ddab20309d3b3d8bb3949c170f2"]
Anchored: 2026-10-16
Public log entry: search.sigstore.dev, log index 3273342496 · entry 108e9186e8c5677a66d7…
Expected log hash: 8a8ea4260f3039926c3342603d4fca7ca9e5c627d841ac1c7142e303a049d0c7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1792122420855","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"But it doesn't work anymore..","rating":1,"review_date":"2026-05-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a6a2b4c9d7d1…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.