Yes, I think citric acid is ostensibly the best choice. Lactic acid could be used but as I have mentioned in other posts there is the question of standardizing it. Also, given what we know at this point about this malt it would apparently take 0.027 mL to move the pH to 5.7. This might be difficult to measure out though one could use the same idea as mentioned in earlier posts i.e. dissolve 1 mL of the 88% in DI water made up to 100 mL. Then 2.7 mL of the dilution would correspond to 0.027 mL of the 88%. With the citric acid the amount required for an approximately 0.2 pH step would be 29 mg of the powder, call it 30 mg. Once again it seems that dissolving 1 gram of the acid in DI water and making up to 100 mL and then using 3 mL of the dilution might be the way to do this most conveniently.
No, unfortunately we cannot titrate malts in the same way we do ordinary titrations i.e. add an acid increment, titrate, measure, add another increment and titrate again. That's because of the long time constant of the reaction. We need to start anew with a fresh minimash for each acid increment in order to be able to predict from the data what happens 30 minutes into a real mash.
Please review
https://www.homebrewtalk.com/forum/threads/malt-titration-finding-phdi-a-b-and-c.653403/ for the procedure. As I note in that post the scheme for more measurements faster that seems to work for me is to pipeline 3 or more measurements. To do that you would prepare 3 malt sample and put them in 3 beakers and also prepare three 100 mL volumes of DI water with the first containing 3 mL, the second 6 mL and the third 9 mL of the 1 gram in 100 mL citric acid solution. This means adding 3, 6 and 9 mL of the citric acid solution to a miing cylinder or volumetric flask and making each up to 100 mL. Pre-warm the malt beakers and water volumes. Then mix the first. Wait 5 minutes and mix the second, wait 5 minutes and mix the third. Thirty minutes after the first 'strike' withdraw,
cool and measure the first beaker's pH. Thirty five minutes after the first strike (30 minutes after the second) measure the second pH and again at 40 min measure the 3rd. You should now 3 new pH reading at about 5.7, 5.5, and 5.3 to go with the pHdi measurement of 5.9 and the 20 mg baking soda measurement of 6.10. If you have the Voltmeter spreadsheet running (Brewingfunctions.yolasite.com) you can easily calculate the mEq contributed by the 30, 60 and 90 mg citric acid doses at each of the pH's measured and then stick those data with the pH's into the
a,
b,
c calculator on Sheet 3.