Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I never received a concrete fix or timeline”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2594412582

Proof data

Record hash (SHA-256)

0ace8c2d6bca3a3c1c23dc7f3070ba8605ed084ff24f079467678c0dc9b44814

Signature (Ed25519, base64)

yGOiO0N4NMHStSlfKo0XBD8v1HlK0RDJqhj5SR2aWXNBzXLziiRho2FtoGBLVT7GvrK6RhB/MRPwHgrDYS7CCg==

Merkle root

d414e521fef9d6d099989fa0d693684c20b42a89a12033fe1adae5ceadc28160

Merkle path

["0ad0412139c3338b61f829671c5f2ef80308fb48c97bd8755a32e8ec6810bfd2","df348c1d49f80e808f7f5d178bcf3b13309f6db123fd2bc9013eb4d09468d3e0","668a3ed89fd03dc1456da9638b4343c32246f54a98dee803c31f1af1a38129fd","fccff9b9f087d9e9e43ad4625aad2e8e5cbbd0c0f97f63ea916042974954f291","b9c0f56c6d253f99fa5499ff830ddc8e753bba77f123730293da5bb8e563c6fa","5703fe36562d9751fd01986bc530354da2c3b5ec08309942ad33260d6b830979","86b3f3d57a50ba1bcfd01dec199c2f1b7b328ae071f49962419efc4046548cca","71731ba3ba88964b14f15f6334a49dc621c8db6b0c0b21a20798318d7b7af705","0da90643148805b4d567a8691c78ad88d9c53aa258b0902d965ed17dab2aaa64","389245764703bb8694756924d2296cd6e1198bc1dc374c17fb3186520e511500","713e2470ca565502037bfa6fe266ee97cdbfa1a52a7fbcbd3e73fa59f3ecf10d","8fae7514a4924bfe0cf5e60743f69291a922a54a6ba19c537fba85dd4397db12","f77efd58ae82cd437163ba9ab021e9fb524c058feb0d1f3bc5d429c056be2720","dd85a03194c1b09d93a4be119d3146825d20c9e375d143636eff256904ff3e25","d9bed3bb20fbc734967be09c1cd24ec9d5bb72fd1e4fdf84e6057ce858f8bc78"]

Anchored

2026-08-26

Public log entry

search.sigstore.dev, log index 2594412582 · entry 108e9186e8c5677aea33…

Expected log hash

b1897d255cf944fc063c3044a4546ab02c40327197d891ce843dc1c45c2dff03 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787713855428","kind":"published-quote","locale":"en","page":"subtheme:proton/service/support-responsiveness/en","quote":"I never received a concrete fix or timeline","rating":1,"review_date":"2026-07-28","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1437005085?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d414e521fef9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.