Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very practical application”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e94bcede2b289561f1b9c5ddf55a88590912fb9dcbc2510fbbacdaab10f5bce6
Signature (Ed25519, base64)
5HHqCptRfZ+inb/7Cp/G4nOB85hI983xdQBlFlGKjqTCqiHjXgV8kNSqEq5BegBJk2rQnXYeIO8XUgzyKALqDQ==
Merkle root
52d6be1abed15ebd0724a0e1a493d5805e1ea49ddcaf8e9e5584928cd3e4d759
Merkle path
["e94bb3b425cc9bfc487d4eea37adbfa0e8de40c1651bbb4c5a879bc1108f2e44","675e2f18dca5c4f0d5bebde742f89b694ee796cb2868257301b8ab902e4ffe72","88eec7b3d1bcf6a7e259921963965d9c188983470aff31efbbc1ce535cc31bfb","38eb4498194b645fce370d63f6345cc0265fc4cd5e6bbcc4d953c6866c3180f9","0ca5cf8bd5e09f09bd04085618f2b34dc3142e0f34d51c539d8fa982646e4b69","064dc8c4bd80fe3bdba969052f9845b11a0705c04ed265ccb00fa78dfff5f97a","c460d6cafc1c0626224cd72846d876002f19debef317a3114c2bf19f3fde3276","c828d9264070ec83df4505b32d2039e8af36a0ad1eece86ab7c602e4815546ec","a76b0efc9e4347e8372f9e935cbcf9bac6e7cd14989dc3c23bc6287adf6b98d2","50c52d98e73a886ccd4cd851aa603fa771cfbaab9d578c69078fe9f2b9d127db","f054b873a732dd907a1ab08f3948a416c6e386a35a7d1f35c44d2e1903d9d786","8e5b5f164b4138fd16cac15226197ff2d995652372ffc88c306415b74fb17312","6cdaaeb423ac3ca9e71d9b6b7eb5dc348e1fe6f5917591151d442780b0e12a0a"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140475820 · entry 108e9186e8c5677a78c2…
Expected log hash
bb68bef30792bf00f645df162a48943f770bc3f026216a44dedb4651c8ac0917 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791431489246","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Very practical application","rating":5,"review_date":"2025-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52d6be1abed1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.