Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The iOS app does not work.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0a2c347582204b8451a90ed89ca65cbc105b67d493c91bca8dc81896f0deb1b5
Signature (Ed25519, base64)
G/cxIdYyGV+4eMcfXlqtshGB8yktyXNt/SIXM9bvNdty8V91DF1D5xyWlQcfBwxq7d9L8OKnHw+sNCYoh4ekAA==
Merkle root
68ee5f8618d9ce1aa33f2cb5b6f3145b5f909a3c35a03ccc3d10e979b2f81082
Merkle path
["0a2ebb7aeb4a4bd5289c0a5267761bda0dc39adc24f7bae1b9410ee81837db8b","f85365dedcdb778278e19246215336dcfbcc18f1b6ac6e9f643ced9b4e19606a","27e67d8527bcceefad168b44c6edf2b93679d13e7892e5e64d9b19786cdf76f2","eb2bfddf1bae99df234b71505dd8a16d3636c78f317f68a9791d164366ce37c7","64084c9a108e5c07fe22f41b3df0b8d5690f3793da00c06d6ffa482835dc17c1","20f41f94258c0c005469927d3eb23b23f9e886d55e267fe8442dc67465ca3f2c","4af7958a755c9447e70bd2fffc4ac098e3c535d6134a276c253d4fd6c5bcb021","b8d7cb5523be62248f50ab7e45b215ff681262ff40c04665b1d1f5366d6bd93a","fb24b456e204c4184cc484e78ff2e1a213b26adac09583eced115fd212718291","10c86027b0ef63f615898c52372eedd3ddab59594a8d18ef390e9c41ff8e2d04","e9213ada7e329b7ec9e91b5f2b11c05e30a6622d2bd072cf7b5757a128306902","43121300a82da93d01b3fdc8bb17f432c227d8a918d31c79ee0d99fa14f29075","e6960377f92ebdc1b41fb37d3ed0decff1e5fba5b62ad653e7be0f8408d1c6c3","e66299710f80b56c392136748910ac59d79a991f3e479ea8a96c5c23e200aa78","418554fa0ebde54d6cdcc03145c7126505ed96d3734e8e7ae56dc0dfd8ca0a2e"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140838741 · entry 108e9186e8c5677a4791…
Expected log hash
ca4949400cf2d29b49789563ea2e672fc73762380548d6fd65398e40c0d98728 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791433229105","kind":"published-quote","locale":"en","page":"brand:sevdesk","quote":"The iOS app does not work.","rating":1,"review_date":"2026-04-20","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (68ee5f8618d9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.