Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Receipts are sometimes not loaded correctly”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
06d71d62236c49bb5f19dc4c8d9451874ab6fed59013539ac41a982ebde84142
Signature (Ed25519, base64)
gJYxcWwsGdyq+5PT0k8TnX9HUMfJm/3WMM3mh9gpeeXUyfHqcuWaOG/ZA7GYc6y3zRuWEUT61qw8d7r0oIlXCw==
Merkle root
b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path
["06cfccbd7f5fdf60300db8181d1d06bf5ae1aeccf67195fb71a234fc8b35de15","fa91a002c5c55ab6b2b1269d4622be8ea8cc22da29c7ec1be4d06277f151192a","aa3625cde61e59e18c269cc487ed889b7d927e9bbd165f6ec306c4e1463d6899","079e9b3c5ccdb62ec25df04c49a9382eb208a96c02e627543b65e0ffeec5aa87","3ef22a0c8e04937ad2002b79e40e87083e534ffd66ea5584b2a5488086afd1e0","cad1281102a6ead7152401de0b772c79cd89936e0b4350aef09c951008e7d335","6b838047e7851d1b815961a5a0f54c4dd222ee37e2fdc7f12cb9c51a1d2cd4ec","f7b8184e6b427a12c033541d638de411a590965f30134358120139297df64a08","11f84ea64d5b2c2d573d2929b9897107fc8ff575fb9cbbd8c03ae55f23e13fe7","14dac0adddf323e69e9ef8f42d88b43ffae33c97a160ead0fdb242051d3da527","e78efaf320415120a8dba17ba0c988c4c27c8c4e3cad17a7d8db163cfe05a4bd","00658215e391bb39cb2a4470aa8304aac30f760b4b7065f3aee8dafd9f2579fa","a1ffb0ca27bb2bf54e7fd100f5c8de52d61a97b22e607de0b6963ed83cac9929","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash
687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787134378129","kind":"published-quote","locale":"en","page":"theme:sevdesk/ordering/en","quote":"Receipts are sometimes not loaded correctly","rating":1,"review_date":"2026-07-04","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.