Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Not useful for iPhone”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0dfbb6d818dee55d7800cecc9a4b8cf1619b0945bcb05c4ccfebb75d0b625eb4
Signature (Ed25519, base64)
FXuHhmxuWWE8Cbiu/zOJGChqEwN6xxdcbgJtYqSM4K6Ys77QtmL5TT5IitAofUSbBLXxAgmGTEY5VJ3bTV3oAw==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["0dfb8bc5565cd8761c7caf8f54da901390b9229acb718d084975a0cf1007487a","7b06b8794bdbc5539d320faf7f5005d7ef86138dadb3d6a32d0b2aab8d2945ce","d4fc054cdb366b2048e5d566d330d4304469d43312868e593419fd59cd10e804","dbc7262b4f5ff874ea02105034dba070c79058f92882c688a1e4e91b92e6c383","2e94905f698752eac1d61b35fa07544c72ff70d474e52856ea1ca17c4d5c53d3","21e5f1c3a7683a283305110eba2b4e19ce989e8843ff6b05294a541d0301ce20","5b38ce9bfd585e1913df62d7ad3c4e50edd8a9172e08df8029930b277bfd98f2","41e19bbc0460ee27eb5489868899ad770d24a9aeb9e4d120037b107d91e2b1de","c5125be2ec9cc4f8129cafe95be92fe8b8349dd1f627e97936ef281a062a5b35","ce4fb4fc0341c678d9bc8bc8e2b6177948ddfe05deff98b3b5cfd11d61ca6ab7","dfbd04c933f1a6e783ed09f1fc088054f8fd53fcd06c493478b5ca49c6e3ac08","518ebf71cd3bd28f38836c9196aba7a4489e76041e1305d37a83e79b96ad8908","3f2c82e50b36e0cd50998d163cc94eed6761dd69609ad29f5eed30a1c7940054","1f7b489a0f1f52a9099db1823d706668c4e68c1e17b4e235c9596001eb5af1b6","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"subtheme:cewe/ordering/app-ordering-process/en","quote":"Not useful for iPhone","rating":2,"review_date":"2026-07-25","source":"Apple App Store","source_url":"https://apps.apple.com/es/app/id583713833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.