Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Laggy, takes long to load”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fa4d04f5e4ad01795269fbbb9b1b51c83b15b3497c4988fad271e27df637ae5d
Signature (Ed25519, base64)
PiOTvrSI7LWqqS/4ZKdxohFpFmp69iCftJElTmNIkqBATxTGdJ7cbF8e2iIKGHEAWDmc1DRQF62Lumdy5b7RCQ==
Merkle root
f2dea3193623a59d18b4d230cf1484689c024b05d34648a4bedfef78c47360d2
Merkle path
["fa4f0be032fb7427ec0d92407588f46e51da329e208fcd1cfb811c99db749213","a48fbfb02358875a5dbfef2feff4276e7f896aa827273430cfc4a11d9bf044e6","660744fefcc628b2ddd1302f6a84fe1b4e90d263ca852f849a7f83781a083384","b3ddff122bc082ac3fddff0be693cfcfbde6cdf7422b9bd07e2b169a96673e98","92f55c42dce16c45834a0bb8fd17e6755604b01d8f3da95e1ae303ed4da6aece","0db4f5cadc0ea85335e52f425528d0b8bd6e8bfd4bae327e340bb0a5f4b5de7f","78f805935f1140a6e5225a5c18fd266891559243a28a7eb863cea19b35def8c4","f3cec92d24de2e9f86189f1d58bdadf148535894cf38b5447df43a99f9d1c4a4","472d014d035391c58d2bf9a9aa6b1dbb7b4238bb6e0be97a1a7a9a05bc66f49f","003feb8bb19a91b0b13140833cc1aaf145d09b57e349bfa93d00b1d82c446422","956e558868f27c35c8770d4293c46ea41d8680513badeec0f8dd3c9ae5d14d3e","a6a5fca740acdcbd68b526875d3b10f80903a8348efe0699e14093879d44a0d1","260366a55c40eac555ff044d8d71bebde62953dd98f786df66f7761640629e5e"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3163461995 · entry 108e9186e8c5677acea0…
Expected log hash
1e385e1035f15f3dbe860bb8f3e4e850b8c2ce2b31edb58c97be626995a4adf2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791544610158","kind":"published-quote","locale":"en","page":"brand:atupri","quote":"Laggy, takes long to load","rating":1,"review_date":"2026-09-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.atupri.myatupri","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2dea3193623…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.