Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Latest MacOS: 16 Sequoia (it should be 15).”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0c8c1bdf4138389a8f52390a6a5b750859f89f79d3824f2584c7987026d7ddcc
Signature (Ed25519, base64)
io34yTsAjr8MM7sbHtBCsrjF7fdnGZ1zXlxv6sawA5D5zVcv3hE/t1kBIWtZFDd5dFQUQSMoq8e+Be4gFXOkAw==
Merkle root
c5c707bf97ff73e1247b0ccd0925f0db0a83cf52cb887b20768212ff5bbc5fe7
Merkle path
["0c8b2bab0136d4354882a674e05b8b806e8ee2f8e1612f16526b37d9397b9d2d","ead32ac7f7b84abda6c5d37fc332090edabf28bb0bc18d38704070824c90854b","7d14e0a2e1e5349446e502d5d6520288759ae2b7fc6689783d1d550fc78cbc98","c3ca89fb923f93abd10b0a1462866dc50ede1a811756d621d4bee0f804e1a781","18808b35e5c2bd89155e93d00eab9d27847ab0b98bd4b790e1fa010e61c5c5b5","8677aedc76ea9c077b8f06c3300f7147d1fabc10e14ea7968d6845f3c081b7ff","3aeb279ffdcf2122ab2ff7f89f63d82a4a600d713329a2870e9f0a752aa9ed23","b353023190ecb7a37927559761ea6ea1e5499bde2bedce25c5859d5c9b4f7f66","e10dcbf9ea018cf04d8ccb9c1536b131ae68e4e79776a11929141e4c292e2719","99dd1aa7adf0f74fb5e031391a9f82b1bc8227f685b77b3562414196161d1891","87847f24a5a901dcfcebe37fbf73ac0f6415d29fc4547848cd71b386a20a8f4c","fa28f9b79bbac98448fd0cf268f2d08316548682d0e5eaaa3b41ecd61a4ed731","bfa6d3174dc6ac2ac973ef7dbeb8001d2697f9586894947f07415b5ac90efc1a","61d99ae8fc79aa7f239f794770b00be2b8c5cc1d2483d723f849c6b764907eeb","3e1fcd4bf6d45c101c10e6b07d5c593b58f9445be77bdcbde26aa7026b1ff6e8"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2683301360 · entry 108e9186e8c5677ac685…
Expected log hash
2e7e5158dde5972120030caa35508ea4274f63d72a51b34adc6efebfc2f2527a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788322918375","kind":"published-quote","locale":"en","page":"product:infomaniak/swiss-backup/en","quote":"Latest MacOS: 16 Sequoia (it should be 15).","rating":1,"review_date":"2026-01-24","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id6754152858?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5c707bf97ff…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.