Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“need to stop app to see app again”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
efedee759161ddf78535c8b64be49cf7cd3041ea96d6dca5db1343e93639dff0
Signature (Ed25519, base64)
peiYhvu8X0l5rw4NE1rfML5GOlZcfQPY7J5M5ta94glc6YTALtry3nNK1pGHcCa72RoF05mnaefinl2Q+y9qCQ==
Merkle root
a086f9fa8309b32cad6e06b6c84c12133a405483807f462eafed4cabc6f3fb99
Merkle path
["efed385c45faf5d15bc189779a4963b2b7a0910c53bcdea50f64ad8bd3d15dbc","5f5d709fef7b74a58b206b5a198d3a4fcf71beb62ad3dbfb159b0c80a4262cf2","3d37f6fc44da11f7a7a56aa4ffb75ab380bc2158a90b99a937c4bda82e8441cb","a6011bc23b38c66987db81e805cd3250e04b28da39107c95a4ac50eaf80cb485","d53bb91e0624ad921bd94a8583a66e4f7523c3c102ad44be0392b451cf5fc8bc","38a93e9ee6b450f5e863276939173e91bc5a37cc37cca71fc79edd73473dc60a","aecb55026c0d359e8835002af05c9462d29fa8df6cb4e578350bcafa4a651f2e","4ec11f79dfad6581cbc4eebb0332ddb1d79b24bdbcfd46d08898f0a4a42115b4","1ac4e6baa9b880748fc7dceb8ef187f5ce4c21cd1706839d8fa9c4967a0cb9f8","8b0c2f4c8e5f2dac96e4ae53852493999cd5e1b3d8b2865db3dd2a995e086ba0","f1dacdaec0ce4669ee5bfa3e20cad3a25d474c5d2c0a3825b831efba191abdac","33a95a23eac6007dc51a78436e9dd1fc5c9a9a69990888b557068e0067761ba2","6e378639d62544a07053451bac5b4030370ad36f875d82faf78bd3b64098a2a7"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514476227 · entry 108e9186e8c5677ab19c…
Expected log hash
9a346357c8991b17bced8f12238c2332c4ac3078c0d9a283ee00f82b3c69be66 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787129084398","kind":"published-quote","locale":"en","page":"theme:meteoblue/communication/en","quote":"need to stop app to see app again","rating":2,"review_date":"2026-06-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteoblue.droid","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a086f9fa8309…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.