Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Buggy, always changing and crashing.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f98b36745612420673736b11ab9af0e1b11591459504f3c52e3f6d339bc2c9e5
Signature (Ed25519, base64)
6UqThch2lYvjRjKJ6AxKOsPP5RCzZjFUGT51Xl905w357sNzvKbbUtprSYbZl7peOlgFGO/NNR5GiSBjhpFtCw==
Merkle root
197f899fafda406e0c9d0591eaf3664c281655082dfd19c34045187b374127b6
Merkle path
["f98b98b2b78ba3e764bd60c9938087c6233630ab61e105a8cfd64911e83bf707","afff4b3bf0f6eb0bea691e9432f8a4bc6cef8b775b1d8b11b7d98df3ffda15ef","6e8180131d3a16035e94d29ccee17c9234043347771a7d668db8d48f1e37cf31","37078ad0b25e3534c0984f15899f32309e2fca25016fd7b6fbb776985be48de0","2689dcbd3839a64a56935140b45184c947c0847a393bb2e1c4a984f015c745d6","27439dab11d0c5eafce93d7147043238c183cc097f844acd90f5601aa8b96881","442f297a6e8701e55cd007ff2ce4da01afb03d14fab8e498d4ea21701fb76ea4","a516457dfffe73d064c108369d4153ac61f760eb53607bd2f2fc846916059659","52f301c8e14aeb6e106f2c587fb4cb25d3e1704e9c29cf85c815ad7d15ae0f2e","ef1fd7033e0f945134835f1d6ddf1aea1bbee043c0a5a68222023a70f6545b1a","83bc9ef2ec75491ace7b71f62c2952313f728808bd93bdd844e25afabc0a1e52","9c76d14f9ecad384be95e0fb9468ac610d3cf006a044c55960e95f654d5da9d0","9d8eb60d36f443bb134fadec774a73a1c6c1ee8363fabeb826b6d33b69331125"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514383033 · entry 108e9186e8c5677a6078…
Expected log hash
4e5cbdb3dc34f3dbd6a57b603e905df6c94968b41f5bd83d5c9a25f2ea060d8e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787127398505","kind":"published-quote","locale":"en","page":"brand:drawboard","quote":"Buggy, always changing and crashing.","rating":1,"review_date":"2026-08-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.drawboard.pdf","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (197f899fafda…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.