Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's a shame that you can't edit quotes or invoices on the app like you can on a computer”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0cd9d99f93acbf0ff95a68a7fba6e78e4e3404da4bcb283c3ec50620b94ca232
Signature (Ed25519, base64)
eRoWV+Jwws0IHk700DPv4XBqOGA/82CoOp2R0t+//V+rlX/U06vvNw15QuMkZLr9GlvTwFHuHTZZCxrpLUJFAw==
Merkle root
12764493a64961d0e0d426bbec64b837c2e35bc22a58920afcc56db07df6e8c9
Merkle path
["0cd00dd7ebae0402c3b338973fb2230e02fac1327c4742692263c3e175b7acbe","3880e19c16c00f3dcb83af3b3a1cd5f589cc599b75686db4d1adfac9a8e71c38","ea128034ba7cd195ae3eb70ca1b851b5150c5eb19500d464bb5c1fb6a210e43f","dc1581d00eac257a44b9a2755d4f37ea0f7581fe1f72b397d46bd3e5701bd71e","f9a138f849be1d32ccf0e7c176628a5d14305213f9991a5cfc80bd8d3250c666","983c787339fa112469e3e2d9728237e0a639ebc141ec8057fb58f690b20dc612","f5986932a1061fd5935d24337cd6df1a0b3cc9093606ec410b740130b7dfe0d4","e09f6b4644bf71e5e7587dff1af8bdbc776258b230213b77ceff0e461f7ac312","5ce9aa937c3e98a4bb4b9ef4e3e4a357197767b883c6fad1df9f86feddd5ddfd","b1a33d2eb09106ef36f815aa7ed834e778ec8de6ccd6e8d78bd959a90a2da509","7272cacf42a6c107c9b27dd39dcb374981b160e8fad57f25b3db8cd10562ef79","5629ee10ba4b7cb4395bd3f7417bfe15e0278eca0a90e9ab5a5626f1b4cbbdcc","b6c6b7aa75be4fd4f206793d7c98702963f427cfe45d9c46972416cafee9a131","bf01790763bd70681430a2841b8504c59b88918b5b88c9d70f6ee7041d7ca6c8"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3198225546 · entry 108e9186e8c5677a10cb…
Expected log hash
a11b46fc63b94f32c49058752856fbdc4e92f7a41d4e67238e3563657fcd50e4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791685609571","kind":"published-quote","locale":"en","page":"brand:bexio","quote":"It's a shame that you can't edit quotes or invoices on the app like you can on a computer","rating":2,"review_date":"2025-10-23","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1481169504?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (12764493a649…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.