Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I would be willing to purchase a lifetime license, but have been burned too many times with ongoing subscriptions that are difficult to manage and cancel.”
Google Play · 5/5 · 2026-06-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2525010456

Proof data

Record hash (SHA-256): 84734f74b7d20f9697ff7b6c9379bfde75e7c540a1690d5380e931d70c519ca9
Signature (Ed25519, base64): 2H3/pannFcZJ2IUjYSjw20DPWNrbYmvNC/FYhhqvespHPLr+9fbJySQN6s3ncHfME57iIhHTMPOhzxkB3RS3DA==
Merkle root: c69b412346f0db8d88aed17dbaf2e4876a3743c1c4d16fb306ba56b5c0573123
Merkle path: ["8474290b338d2a4ef3c3b2b56a140318ecc2cc4ece858215b230b020ced92613","cc72e221b4685e2531193fb69b81028e30d0374e2bd0e0f948a00ae9f63ddbe8","fef8f40691281b8af9392226145ea7e123785725a92ca20d46432a8c68d94589","f13067bab24a6c763672bf8e004672541834831ef7312561f3933069dbd5d426","a9e2ed8e81d9ab47237b491ad04650178ca57b4a1fd1e7efce948b8a4db43f02","5706a99c274f8b82bc41f9af4a13225a1f4a712d3bdee71f5c01e791448bded7","f97f2dac10a2b9fe37453c3cf36dcdfcc762c1430ef7d50541d25c3f90b86c89","5f9b60e25a49a302527a4d27ba759522f43c094b7de2af03094b9fbfe855ecc2","20a1bca10d7f48b8a1ab754ac6bad86b61823136c2f05f3d0f0d0812bbb90320","5b6fd828aeed0353aa6de9db62907c13de2352aa5df19ed7167adb251abfd56e","f3f533c6c208b7d75ee1014397ac8bfcc5fc14d46d9f6902441410cd4c896f4b","81abe03a6b275e4c8d51fe74025243c6beda24f8c49133e621298fbc62e1901b","ceee0a42168dbf7fdebe6a87c18868b362d983067ee9d54459c89ffba781dde3","7374897de84b1f86ca0356b906b6c1bc842b8a45ccf90424df2bccb9b7b03d1b","3da38b679e2392986aef224a332d14750fb3a22c4e75287765e8f68f575f24f3"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2525010456 · entry 108e9186e8c5677a4287…
Expected log hash: 659be4fcc7663b2dc65a53351e16497fea44ed9ec8aef1f3c48c8e452b350dc6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787194832011","kind":"published-quote","locale":"en","page":"theme:accuweather/billing/en","quote":"I would be willing to purchase a lifetime license, but have been burned too many times with ongoing subscriptions that are difficult to manage and cancel.","rating":5,"review_date":"2026-06-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c69b412346f0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.