Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Unstable on iOS”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
11da8f49d4bb3a494c0dda60251a161072ae57c16ce81580ecab1db48766d402
Signature (Ed25519, base64)
xbk/z1+WconBU6y4kn2mDFcl1zDBsQXjg3zRyOZ0Iy3mYilzfhse79stIUkOimyK1PkzrSV/Yl2Dif4MCmnRCw==
Merkle root
400ee8bc8bb6e48ec8bd5ac7598e893e5cb7545daceec4f0578b6b1d061e7911
Merkle path
["11dea7c3d3f1473148a0cea49b5b232bfd02e50dbf6cd4836917c8e676f657bc","8638e4ca2a65d579d702a008bb1bf3b32c1ccabfa276cf50e183f60403c46783","9cc33405ed9da8f57bd3e2f58870cc887088f1bc04024f0e9eab4a6f625c7f89","1f26ebeb2113763aa8e61b476e7d47131e3e821cf17b258de8e6d60b506b5687","edc920de3d7ecbbdbd548addf8b7d0d137db6896c3edc09e1254452be98fd33f","6de278d23784876f5bafa14a9180591228c75f51411dfcf8cf9927efc3f9239f","cd2d5f8e2e0702199b998edf720ff55d58f2aec6e4e3ae8584bc83666429f621","a8006b4647367ed9d16860710a3c7d1f7e2b6ebf9fc88a9367a6d71c78b3fabf","41d7c27aecfac81b1c62110abfea3e1a91e5cb3cfdf5ffe6aa7c2620fc477fb1","66fc1ed16a3a96e328182dca7e976aab56c1844b288ef083cb693a0fb91bbd7f","2e9c103855140e51eceaf24ca595284ca59b6a48b76b4f034b691e5d61aa7de9","b5ab1737bc9308731ecb053ccf75db596a2355ae3fb7620060dcc7b8b1dfa0f4","22650e52df9280862acc00b0e6ab93766ded9e319b1c0dc3b33551c04f3caebe","3e875c75273cb6de71b32afeb0515bfc68d941b50d1d4d965b5eec9b8f79e681","da3c78d15c3e7e744f2949813be9d01fa753f12e538edb94a65a960b11043d47"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3082153890 · entry 108e9186e8c5677a31d2…
Expected log hash
cff4076b1696aa395d1840cc38c433580d1b7821d298d64e1adff5db6503370b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791175845570","kind":"published-quote","locale":"en","page":"brand:proton","quote":"Unstable on iOS","rating":1,"review_date":"2026-09-05","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1437005085?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (400ee8bc8bb6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.