Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Passport photos bought through this app are not cheap”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0146cf9e91e9a23ab0a791233df485b10193f508a0a0ee219e20246c8efeeee2
Signature (Ed25519, base64)
goDq25FKzzn+Z4P2rVTt8NfQ9zYZa1NOpCFRXPcHQx0ge7W8MfMZOWRzxsP5s7jOXa0RKq2zV9BIGDYxZqvVCw==
Merkle root
888a38c73939ec95e6f226dbfb3637325026fcafc5a795aa4e227b811d6b2c84
Merkle path
["0133eba109cd22dd247cf38ba59e0dd2ffd48090e98d887d1baea2d558c0cb42","dfd97cc23dbfd4e1710aa3ad594bd9e60cba9d2979e91b80ee9ff6b8666c84ff","681da35e8432223cf7c09b16ed101d43601c17b10269c82917572cb79816b8e1","1ea4ccb785d697f7efc7f0a88cea2dab9eb90c42ff5ab4051eb274f690f2a32e","51451f5097e89183e41619eb3d7afc50f50f8ae56e6d5c05f2c89224b21e4d9b","8ff81568c4c75154272e24dfcda48807f62dec0c07b6f1104dc873bbbd933b52","ad305fe7fa16b8a893f7dea756633939458ca25353e7c58ee4c0763422103286","d3da3404d0577548581f3b742448eeabf0dd85f4278b541db15a651af94d5a47","5d2a804ec8700f500579fd76c5bc7a3d0560fb14f9b44a5c5e3aaa2eca859a5f","f5d0ca8ddd765dd1b78d37c77334576cba8d93667406acbea48d75cf49c9c243","c1eb61eef936ab9c32f3a3ac6faa2ef692d0109d56de9f24c4d9e0b98dc22705","062cbbfbeb4fd46f2079783d29fb5f6cef5c48e70dbb9c2980860cd1d92ebf74","410ad2e8ec6f218bef120c1cded3462a092f61baab59fee462fd9704d436d66b","f46648ad2fd9f2769b9fc0ba1c434d2040de67cbd8b7a61df7b7575cd5a9206a"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3240231023 · entry 108e9186e8c5677ac0ab…
Expected log hash
bc440cd3136178aee800fe49b9cf2e319542a645c9abbb8553c6ae1e354ce201 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791860805798","kind":"published-quote","locale":"en","page":"brand:cewe","quote":"Passport photos bought through this app are not cheap","rating":1,"review_date":"2025-04-23","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id6479752402?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (888a38c73939…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.