Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Change Server Limits”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0b2d1f11d4a9418b4d1868c42e49d67f298d0c0719718cc541bba3030799255d
Signature (Ed25519, base64)
Sty3arwwe77A23x0OAMhH+pojyqEo2bOxYaKqPyagZLkdrUbY2ru+kiRyFxqTpziGRR1FROoQfAaUr0GY1+NCQ==
Merkle root
2cd516e344e4be63e12361494ae610d89d15708131c24034ae0c7b134b8bcc53
Merkle path
["0b366ce460019e73ad30f6006e67c57428f79a5c0645c9e17e62ee6e610022bb","746f80d5d89f40eb66138937df728bea192f2f56516ab5f24ec2c7e9c33846e3","ffac4b263b97495171bd2b505231bc1bf83a9373aa2be69cf56c3f8b19e6a376","18a1d9346a9ed3499937aec8ab219e29a7b8e0173ff81f09fe2ccc0f0ad6d12f","d4745078c06f443380594eacd615571d190cd93120529e5cea4b75118faddd72","05426bff4e3d32f062495534aeff2b882470cf5528e12230e4176c5798905413","65066adb565fba72e9202216ea8737604254eb52fe654ec6a511bbffd0e36816","cb85efce8a04d27998b2f3186d9ab3ca4887c62c3b5e921e15f9988857c36482","afc5435d93abacdf0c7461e3761508c4f862860e5f1b48c412e1a88067b2450c","6f08da55f822c49c3486248c4678089d0543810a9c643b42b104f8af99e96e28","ac21f8af041fe96dbf9db80c88446e44320bf6fd71fc6ad269cab7c32fe48cf1","11851d586c9f38a56ab982eb8cd3943e06cb4a5d762921d94ddb141fbb64e148","ce748a4ea17609932077a2ddf349ddc25b0aac234841b63b72566db9472e9268","223b4ba84a44374ab9643cd0f0caf0fb6697417054944b56228a22297574df64","22334ce08b4f33f031252a9b7a089423436312a37092b6e742f7471c7ed075e3"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514341362 · entry 108e9186e8c5677a67a1…
Expected log hash
81a850cd5c32c6b6ee86a2774571659cf829f205adaa17a6b9e9a6f5bef7642d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787126744998","kind":"published-quote","locale":"en","page":"subtheme:proton/service/server-locations-availability/en","quote":"Change Server Limits","rating":2,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1437005085?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2cd516e344e4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.