Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app was soo easy to use, best one of come across.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3668983302

Proof data

Record hash (SHA-256)

045ac320326fdeca33c395be989413f5044aed9793ab2d675c819801a2188224

Signature (Ed25519, base64)

gjavXVb6eKhZ7BoAh/6ztYDMwOA+mXawb0pBBeAln4JIQ/KbX53rlml9y6AKHLE/NPBIeqAncBFDB9SYRuocAg==

Merkle root

405d85333c1c03a7ae86f6b232380a3f0e8a386e4cd2c9bf5bd2480ae9ba2988

Merkle path

["045508d13faaf7843667d7c2fb19dac66c26c616a7f259d05857d4c1533cae71","1d0a66f0ed2be1f86b30bc6b06de4e48547618d9e2a12c46578cad4f139714b5","a371296a3c5544b5ba529a0523a29200671cba2fe0bf4555346e5c2165a9262c","902e4fb55c6c88d0fab7464b540fe4ba361127faa98adf682b66942dfd408a88","fce686a20717fbae76353b038d8edc37b9561d8532bf9f04f9293c609b4705dd","2b7db3e1749da13b1017a4c16f5ccad525c1c9b52b103efd512ff91193c4ec6d","0a5193573697a0571e0341c129164c7c6dd8addf0cff33dadb243f5ccbcda914","021cfa2f0b6e60344f967f090c39c3b70102388f0f0ff154f4255914d86d3e01","76e74f0fe8f494438f2b6b5a579630f164c7e6a7cdfd1afc580d018bb4a11dfb","53166ac6aa2d72eed2c595c332cae2572567bc4d29a0d413a0bb93a319bbf727","9042b1a9a265251aa85b8f7a8cb217e986d09163da8aee80a3bf1f89ce1ddc8f","786bb926eb6a5735d53cb29a06ff3e65b4d29ef8fd39d596873e263e6e08aa4b","19a71f7971408d12f874f3ea09b06e4f9b44cd26f6dbc08d0466f033f9881220"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3668983302 · entry 108e9186e8c5677a323f…

Expected log hash

f9f0f1b08ea9ca6d951fb003d493c517d980826708a70b4fc99c8b9c98e286e6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793707617662","kind":"published-quote","locale":"en","page":"brand:cewe","quote":"The app was soo easy to use, best one of come across.","rating":5,"review_date":"2026-09-24","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id583713833?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (405d85333c1c…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.