Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Constantly have to re-login each use which is frustrating and a waste of time”
Google Play · 1/5 · 2026-09-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3140475820

Proof data

Record hash (SHA-256): 7d0f1a93ea0f83548a22e3de3eed0f80c56d0ac31729ee0030b61d912e22c042
Signature (Ed25519, base64): e2jMG5uP58UVOztfzH4dMyBxRErgV6IoAvguM34bw3KlHd/KjFbQnBTq4rIdSL4eU+JGoQ1rxPipkmssqhnVCA==
Merkle root: 52d6be1abed15ebd0724a0e1a493d5805e1ea49ddcaf8e9e5584928cd3e4d759
Merkle path: ["7d0ed75b9e298826eb4f0f73d8638a25c006f0379ff2edf37f7e1613dd7a60fb","d1837ce926793fc3fd06a7aeac2b390fcd362654cd6aab2e325ed20646a6d537","fe2c66cf03dd343286140dfc22eb0e71e15f816d4f40a22bb52be2c9f5151dd6","8840333df92cb8ed68e31355ad5f5ebd42394b84d2bb951e19b6b04dc9b2f1e5","f7803d04d56e251dbb0cfca80b3e63093510edf046b5fddfe88fed70fd2be31e","aaf3cd83fd8a6eddbe4ba5ba322b18504e42a8ac3c63357bca4bf39def945d8d","3d746f6904fde529fdbf1a0d3508ed96fd73f23632fe962281e056ee3d607986","07c6f304e59061aadf05a822325316e9c881cf9ff0b346dc4764535a371d08d6","018a1e51b6dcb2d9f2ed5f9b3fef3ad9f4e64a1859aeef66a6356bd8ce9e2978","12f84b99a108726998b5261e9a87d0dac4e91ea2af72dea47efeca1519670feb","62b8997ec4c717b51b500c482beaa2348f931e1efbea95fd159796c5fc494b71","260348b0a5779fa06f4107c3c0f9ea1564278f13c24b32578fcd3207fab3eaad","b385fe89375278f2b45342434275d4a9ef2cb82ec9dfe399e3688817019e556e","64b3ccbf7465086dd7db73066d917eee6e4789a39addca1cf1c9d0e38a1ff084","b72fcc24171828b3fdfff6be65bb433d37b8e51a187739d27a216a784d84cf36"]
Anchored: 2026-10-08
Public log entry: search.sigstore.dev, log index 3140475820 · entry 108e9186e8c5677a78c2…
Expected log hash: bb68bef30792bf00f645df162a48943f770bc3f026216a44dedb4651c8ac0917 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791431489246","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Constantly have to re-login each use which is frustrating and a waste of time","rating":1,"review_date":"2026-09-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52d6be1abed1…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.