Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Very satisfied with the experience and support provided.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3199014646

Proof data

Record hash (SHA-256)

1aafb77fef9244e4f83a253c2d8b8ba84baaa8a90243884a806b8322b388abf8

Signature (Ed25519, base64)

2Hyzl/RE2rIrobzKGkpC785UXInXbXi3IC5vXXSy3aZr2R6ehuyL+RlsV5DzuP8EWoYuni9V6rBqRVw5MRnfBA==

Merkle root

79268b3be1e951447ad916daa23d94d3a225505999279adfec84e5728be030d6

Merkle path

["1aa997792cb2552d96ac078e45fe0cb4a6e9d30df4e227a88116518d2425ea65","6ee85e8bab1b24e3601a6080dfff1956c213ea8f1457fc1987fc1fd012320e34","127828228957e0c32bca77462066d8d11893f78c580d5c65784f6d4244daf1e4","5bf8c93d8f31d7f940d780d502ab155c296221c36928c9d9932a36562d167ec8","6bec01e2b42bd0ba9fc6bda820ac79835699999931733383c64c003944a8d2c4","ef30fbbba8a5b9cc3c6adc946680bf725f024876f83e697816e65d9d7e8c0b85","76e15833119ee4bc06396e1aa265b01956f36458c55fc98ebb6a223933ea6cef","66568069da029852bc6d38cbf266fd02d2caf54cddb79477ad7508e42cfef845","31c901b52ca5df01f99a90ea7eb9b2f43e67ad1a56a543bf79ad4f3e6d7da0f6","e9762b4f852d1d18bc2d04bbabb2e592f0c542180f14f68eb3d69f1edaeff7e2","678ceb3344c76dfda7371727396ee96e97a9f6fbea78f28e083d8e2fe3de2f21","385e01036b50aae7fbf449763f02e352d0eab1178ab2a26b3b0e3fba537066d9","ca0926b42bcdad354c17320adc5661c1a0407072f1d5c01424cc2e7f9a3515fd","b8e0a41590cdecf5ee846d5a4dcd3ae91c8a0a052b75fffe7c4c5f4e2ca53884"]

Anchored

2026-10-11

Public log entry

search.sigstore.dev, log index 3199014646 · entry 108e9186e8c5677a77ce…

Expected log hash

55430b734e4d00e4ba9c340c7ab064436f91281dd4cbc27c1ffc37d3e26a0e3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791688566698","kind":"published-quote","locale":"en","page":"brand:windscribe","quote":"Very satisfied with the experience and support provided.","rating":5,"review_date":"2026-10-03","source":"Apple App Store","source_url":"https://apps.apple.com/cl/app/id1129435228?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (79268b3be1e9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.