Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sometimes it won't even open !!”
Google Play · 2/5 · 2026-06-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543266411

Proof data

Record hash (SHA-256): 89fd81d6aaff6e58826c4d6d9afd2e30572fb3d63e58a257e97cc16a6b02cafb
Signature (Ed25519, base64): qoiPa8z0uCC+xCqGpfyTVY4gLCtEen8a6tqI3zr1aT53RQsRoVkts5dgs5mVFpZ10apNtQ7fSfEkE+MLIvt1DA==
Merkle root: 8ffad6e97d1457610bec7a891f189d1ba7dd7a92ca672c69ff1ce3283acb4b5c
Merkle path: ["89ffbfca2490146d94d19ba723024bb745e7b8ad00c0015d4bb054d8995536da","88b046d6d99cb6816cb50baea135a8aeb8d34bb094059d624924fe9dc6eb4bbd","1299caaf7a1466890bbb70cafe4c3b2aabc5ac1ed6a0756f3c590e2e0e7579be","192035b1214eb073505112162a1ac4bacf500e108867497d6497b632c294ddc1","f4ea9bff10fe6c21cd44694cc10a345e31adbca8018868ae2cbc52d07d9be1dd","e8da759c2f236d06b7a4d70f12c6fccf2721a93fd856fbffc3b92a64f2836806","4cbce95b2e232669777b9d83e8f07daf791f3840213d49fd741174838fdde3a5","295be62105aa981c16d6cdc2e34656fdc5c081ea3dbec9b8b9f65d0ec9ee2cb7","2c09043719bf42344c94b45c98191b7b5914bbd28dfa5c708f4dab3f0bd63c2f","fac252fa8af639f945e5e6a29a7eb9119e03087c6e041c32a0d6460e65bbef3c","5e811b46c84ebff85a1bb6474ae1ad49bad8dc602ddab2bdf32031f3bc3f7f3e","eba17e31df34bc35ff2b11b5fd8c1c79c41eedbe124c72b666b44d82ec96dbb8","f2e2a00cc4b5cbe26cca469c9d688a73117013587613411406abd1ce807fedcb","9d2fe576119ee6748db015f1bed3e423f559575b84b49b458e2b5fc136d5fdd9","e9f7ba9964da1314f660fb2f84a68d574ffe9983879b5b54001a09ca5cb5f33e"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543266411 · entry 108e9186e8c5677a241f…
Expected log hash: 443ef8f29d5167ebb4c56a46778facd07b7651afa8db2d089c14a991ce0d04db The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787284817344","kind":"published-quote","locale":"en","page":"theme:accuweather/durability/en","quote":"Sometimes it won't even open !!","rating":2,"review_date":"2026-06-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.accuweather.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8ffad6e97d14…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.