Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“very buggy on other mailapps, especially the send later”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
07131f932fb8ed8181125923edd1c6600ab9d41cb82bb09103cc98aa63bea0d3
Signature (Ed25519, base64)
D59ngzTKaCuviboHAwhNoMDdLKwVRM5ZzyLWmtGglsXVmG7Z71DRwE83xxV9aDJQawwexfRQ3oYNLn6iY8RjAA==
Merkle root
568de27ef784d24fced1ff6a77db7dd17bf4275bd5784f7795efbde800264945
Merkle path
["0703a25e172ed60ab286ff04495fa9ddda3fc3818947f0785787ff865634fab2","7697d9b26d934d571d42a827c06452dc44a52fcbd58359fb1f05a6f935625fe6","ced056a4293a4863eda33e5962602f2442202fab0ea5518e1fc0e5c2dc2e1ead","6da3f74d0b1d3bc72940fb96da5b32b880e01b7792afed4e54a6ae76aab14dbf","240b5242f24aff83ac43265349df8edd231901b17b923bb529fee74e66a9046d","cb696aad855785950e7c051e68b272188881f74233e6e087c7488acf2be65a54","ec3f8f4176558a2476679801dcf653e5239ffd367c8f7f3e3456a959228edca9","24217a253eebed451349a5fc8ae9c66cb588c2467b661f5e1db6ad092f47184b","0dd6ecf5f18e6f279ab76899a3aecc911d02abba393c6b54f5ce1541d5b9f5a9","86d77ccd78be7ad39d425fef021892cdf31a02c84d1af109a710bc0aec50da79","901306f7c89d1458dace38a44733df0079e9f6bcd2d43da3c0160df51eac2c33","e0a30bae2c840156322dae52a02b08e3566a5cd586b033b2074977fe1c676705","b00deb9332470bdcb2bedfb8410150cfab1cc2f7a3ba959be220a4ee71e29732","3940a42145b26dbcc3a80df28cfd69a39fb071ca190610add4dbece01cccc9c7","b986cf6ce32ac8a848b3f8f187759eaad7c0ad1b455850f1924427e953c31abe"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582597535 · entry 108e9186e8c5677a8508…
Expected log hash
20488e7687dc1a73ce99efebf3d47aaaffeefc76737db7dc492f239bf4ef26dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787625364142","kind":"published-quote","locale":"en","page":"theme:infomaniak/quality/en","quote":"very buggy on other mailapps, especially the send later","rating":1,"review_date":"2026-08-10","source":"Apple App Store","source_url":"https://apps.apple.com/nl/app/id1622596573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (568de27ef784…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.