Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Respects privacy”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0c3240a60553e533b7e33a2aaf1cc55ec9535b34b811af5fc91cb15102fc6d67
Signature (Ed25519, base64)
W8j9FzitLSDOd7wrzM4ga55WgWJ3DD3fvP0yTJ316GGzvAGdGA7WvAzdE8inJ/6q2+dQ/TSn67eOTSo/klzRDg==
Merkle root
4814209eff208716b4535c2b0fd0b03895bdf3189545e82450cb75591e4887da
Merkle path
["0c37643eeaeebcf6f3e2d841e450114ea500a942f6e9ddec7a7250b5e8abe517","380c2c535c12ac861928a2aa5f9122421234fd531bb72088f3effae9b05ba944","cc521c35dfea49e5cb16908dcb0e9dd875d352ff0182ea885d813d6c95e1c4a1","8b0f75bf1095a8d3b8e6bfabfb1afd554194cc44ea372bf1757df840cb0c9d20","bda0522f3c4c7b66dfd435be922c107ff2d10f7118d72d506fc89d99f4675fee","975fe016ccac3a4bc8d6212f0732f6b52564334df4d448eb44a7adb2bec900c2","ce8f68585bb5376d0a1073a2766e3ea7b3abdd3efa6471b677bcb9225f78a444","82871a5138018659c66cd5347e0ce61fb18b3c97c65b4242c39bff5c169d6f3f","8108e93a2fd6abe04bae44399f87652082c03cf9db20aa5a01f67dbb76501b0b","ca933f1900d1fd8d480666ec9ab21c6c6366da875a086b6a5c369d23e7256437","ff23beee8d041d8cffde4ea8f96ff041ccbc4b997ff08977df76b53c67b7bdd2","58fc450d8d3ac4da8ac9fcfc859184c101d266d6f35f27c84cc4966e3f248dc4","5ca41ffa95430097818b993a1ba310362a9e5fa81d44bfdc04fd6a5a86897658","4222d4cb0e3cb98443733ef8f53c14d869249278d4ea410003cf03e3a343c09c","12d9d8014c44524a8d93c0e0f1440a3071b98d9de55311024d7d505c5879a63c"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671265667 · entry 108e9186e8c5677af0ff…
Expected log hash
0d4aa038b3cd3d7cc8a3744c8157ddb93929116887b29b6be030d34102a7e419 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788234112368","kind":"published-quote","locale":"en","page":"product:infomaniak/domain-privacy/en","quote":"Respects privacy","rating":5,"review_date":"2026-03-21","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id6737686335?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4814209eff20…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.