Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A waste of time.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0cdc32f9ff6790c27e307ad97348133971bd01c0422c6c9e0f0f5d742a82b860
Signature (Ed25519, base64)
7OuxzWTyaPIKSy0tqT6/0kX1FImI3Rw895Jf37hBi1oOD9V49xihgrs1IGz+ANyFtdL/78XnCoxCR1a/0ri6CA==
Merkle root
72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f
Merkle path
["0cdc08bc6b8f05a904a03ac2d4bb25a596018a206c5c0fa78bed3136ce9e16df","4fe0d6e0c351204d265fbf0ab0254154c73985ca40f8a2b4f467066867171f64","1d1b2b13e821c1a8a9407b95d0e79153aa52d973a2939aa4bf53cb4e4e7dbc63","414b145f74835e5e0d315870c4962ea418a2c4839f70cb2c9973f2553602f2da","6a510a92940bc77269f50aa7cfe96fe981e354b7e0a2b883c630465f6fbadb5a","9ef98b01e53e0bf6c0f11472de0c4a7ff745ef3278385c88d623e775c2a89c11","ee7b4192a6bda1b40fd8d10d6cbaf451317ca302084f028754e9885b611871f9","350d2c384dfc29291f0f10af277babed590fbfe02fb3984ddbdae818fa5adece","b794ebe6ccfbe4670e954ce7cb40c34b182ef3c42ecbaa91e8397a566165e02c","41d93ec6bea3e2ed508aabd7188735f8791ee3884498dcc84efae6a8a85617f0","8d50227300aba901b02912a7ab4c50ac2b372ca5d571f0e88fddfd66fc13b079","dfea71f700e183bb3cd9a8a3044acd27e534141e08568964ea4e93e0793b4654","135f944fcf4a92d6f5a1944e44ad8a4edfeca6c93156b3f0cac35c7e930312a7","768946b507e7dea873e9570265486799703565faf3780e57d953562adfb568fa","6eb04938b6a483bb163369a1d918b32576dde0943755b89bf4c6d18743828ba3"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…
Expected log hash
65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787124488047","kind":"published-quote","locale":"en","page":"subtheme:cewe/delivery/delivery-speed/en","quote":"A waste of time.","rating":1,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id923535970?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.