Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Good app, but I don't receive notifications when it's minimized.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
08b5cbb6af99e4139701a42505ce9aa80ae275e0af46b3c06c9ede25ddff4ad9
Signature (Ed25519, base64)
WlTW3MfTrE0h5M01K4eoYerV+EWyzlbNOXjaNdeBC2n+87ACujpKHI+QEsCNiSNCVw3cxPc63eozFVzv9h0cBw==
Merkle root
1dd7fec10002d9304505761bfad9c0f048c94d1d6a0775b6fc4291f712d4106b
Merkle path
["08b2f0526447f32830a8e3812b478c57f9512fa2898c135262d550dedfc2ccd1","63d67edb9919ab579b6707cc199abba67ea13b122b8f03538ba89755ff6a0186","40de789e56b7e82436f828464271b04eefa00d42188656f8fbb6570e411808c8","7f2f774d8f3780b0c044a8e032ab2bc0ab0731604687ee735860c59199e4af0f","d5064c9818e587ab1406ba70293aac29e32351cb67e51b072e044e7b061e2b6e","13c85ccb9420eec6c5bce1ccac0d423b44dbc7851554b697a86fa4af2bc68e1b","5f53b927b14e88dfae42f0e77ec9c64e7185db9212ff9b87a1e41a1a34d8dff7","0765250876b82c8c3ad78d544194c109812deaa3d97c131101c93782b56ab671","f8605f5189db2be47a809d4b4f99f11e88e3df4063a7b33f8e8061f0b230eae8","33b89339c37110847dcd824531ec15c87baac2fd416928a7cb448f153d0e570e","f4f7cb355217178694d89bb982487bf1deb85544b8738d685461a5bc0abf797b","657ad7dbba37e12f66f02f90e203db2675dc951b7bcda79c809b6eaab0170eef","1e0f2b6cff090cfdd5d25ead7f46fcfc2672d59cdc86bdf2b9755ea459d71ff0","96733967bd879589a2091176049a40f13c26bf93f656924a17f15f3f405bad21","54bbc2d7930ffae8e416e662d825fe408002ca5c9c581c2388ff0eb5a37134ae"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514297706 · entry 108e9186e8c5677ab801…
Expected log hash
861cb9c1424d2f408888a591a8305206c340f8249f4a4581b32f940ce8815405 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787126020727","kind":"published-quote","locale":"en","page":"theme:infomaniak/quality/en","quote":"Good app, but I don't receive notifications when it's minimized.","rating":4,"review_date":"2026-08-12","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1622596573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1dd7fec10002…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.