Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“After the new update a few weeks ago, everything is different.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0b6eb4adc86c830d53e643ae4cb87215b4bfb0f383c6c76909097d00ee0b53b2
Signature (Ed25519, base64)
XsyJOrqD0Sv1QyXRbLV1Ioqt4oRdTbHsbRDvsvg2OxgG27R8FcRkv1E4FUhKwBVfTphkird8UgPkbQ5CRCpAAw==
Merkle root
579ce28fe2708bca920b52a6c28f3fe167f796c34475f556d2646d500467658d
Merkle path
["0b7527aefa82d463bafd66b45958ec56af64e3435bbcce347260d124646014cf","96c635f70607f931d0118dc47ec3b35636dd843f121cb6f62034bfece311deed","a85d91440e4b78d374d87e89d526ec8dcc542ca62eb1f43aa75b1b9c3fe814e3","5df65432d211daee811f7175bd09d066dcea27a08f1a5c8bac12e8b47e671d2a","39f2d16b4d2ad49e71d81b913beff8f8682bdfa49e62432e3831f73925f637d4","6b56b3f985d612474661f5725569d2aa13a223399ae7c2f4757ff14d80b11d6b","7ab2b2e9b3e7b8b670509235793d32c2f89b3ff626b0f118406914357403331b","3999f3e4fba4c04e3d5da788ea4c4c8f4493787e20f107d789b855e1227d6003","cbf124a822442f050686e34657d86e008260366b615e015a27f3ad3e8b1f5f10","c54d61f4d4ca569e15d9fa0af9c8c777876c289b8526aff3c67e4e3a2360879d","8d77f4183d88864a7066da3222e1cdccc3a328a7bc9f255ec52d78feb66ea37e","b63af60aa0695369c55c72d2d202d2a5fb8536581ea7aee331ad3c48eba05954","875317d07bdadae00897a73a7f1bc92eef1edc4a674a08e89cd1f30fbe8a615b","db157fed828260fa197f9066f6b89dc0d54f95a65db24f732f440b0995162421","842d900b1cf416b40ed647fb564c02f9f1047f8312564495f259853a966fa9e2"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2682592437 · entry 108e9186e8c5677a8bdc…
Expected log hash
0cba4b3248d53abaf7e1c602875f7199dc2f8f0ecf513e6f05c7e522db47bff2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788317104782","kind":"published-quote","locale":"en","page":"subtheme:cewe/quality/finish-workmanship/en","quote":"After the new update a few weeks ago, everything is different.","rating":2,"review_date":"2024-12-26","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id583713833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (579ce28fe270…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.