Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Receipts are piling up”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
08ae80857a4d06c5c13f1c31ce9ca397a5bcd8309f54b2a40138e98182877ddc
Signature (Ed25519, base64)
XHd2SavOcg9AHWj0GdcqYJh1j2W4KDqZiip/aCQ/MuvlMP5dBFJwlOFzmI33QmMVwwRB2utBV3FTBnAf9KHwBQ==
Merkle root
80ef8d8174e5c9e41c4b3e86fd7f016ae3808fd6df1be7f458d6b538ad4a1573
Merkle path
["08aefd863039b3cc3492a563761f886c2a295ae320a6d22235881b4e1a27b035","aad0937437f1cd2e8690c16f7550aeb65b97b967956e8440855da8094c505817","a0474b8a83e94d90e009beaf1bc372e8bb63ab05f47dcf8233d1a887bec8eba4","ec83b76bb69fac3d76ffed4766268026af37688115869f20ea1f26c79441b339","e92c53d0d68edd49102f1be940d9aa59577256ef73f59f36bf676cc6ea31d7ce","dee5b6e7f99088e4050bcdf2a4da620b92e2205624958345d9cf6ad21e5306dc","5ff49d161fe515b8d887bdf2763eacb6d58b9b40aa3f7559f8fa8d12c202c213","826d503b7623ebf318680142b83c1b75670754cb829679035e319821ceb17e86","dc3e7df34f49e10ea59565dc5d859aa06731046ce834c699fe98613f70a29e34","e8dfe00b5f9a67b5699899b7a34e36bd16fce704ead624e07e6008df82c6f7bb","6352b510d22393da71e3d337860c623468166a7fbf243d6cde038475910f3643","8a65665ffc3a4722f5c5c41fdca725a257e2ab338063473af47de31540acb863","f750e38a739e49891f23aa1e661d12425441a712e16c6b53fb7b0fbc333659c4","6e65afb9564f3cc8ff91301d96b8fc4fbac4c77bfb9c9dbe43ce13006661d50d","8d9e2142445a56a1b8facbbfea379c6a3fe5da494546393de95f71ea2d5e97f9"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621591821 · entry 108e9186e8c5677aaebc…
Expected log hash
1103461f2f136c93d3dd608a948686a2f30160cf05200779542dada269979b94 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787890464756","kind":"published-quote","locale":"en","page":"theme:sevdesk/billing/en","quote":"Receipts are piling up","rating":1,"review_date":"2026-03-16","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80ef8d8174e5…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.