Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Actually a quite straightforward app”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0d2687e1b184e4a9c6301ecd95f1cfa66597fe8c2c6078a556ca7c0e3f9ea826
Signature (Ed25519, base64)
IXBL2pZtC0BcMN93iGNqWAZaS1lSZ2jTVMeVPyBPfqbdRd0Pg0E5waOD59OjzIGKb2Amq11szagD+b6trT+/CA==
Merkle root
dd24e9f4e2c157def3e88a505d0f69726bf8aab26b1f5c4272da69b916c6842d
Merkle path
["0d2634d22131648ac8b56b1a181153e2ec9c7d3044f5913629bb3525885089fe","2eb99bd0a9ec5960bff26343d98bdf1ab53d63d000c1217bfa657aa263efce36","65eeaa8718a75def1a1c5a9deb6ce644eba151f01e7d7995e689300df568e4d5","518ea12cf5e3f5453f22dbbf5bf3d26bd98b883e45b348ba062529a727a3b9eb","af1311b4edc3584aa02dd81f3a63259543c5a8e4358ca460b1fab4c640436464","f66d2b6445d3dee6bba33d696633c2d098476765914d2cdaa7f0567b13642b75","2b14c0f55996050ac0e74d4d48a00a1e0c3d24cce346d9aefbf5aeebd9cff76f","7b9b179ece9a47abf1e5181fec3df09d3dae33d33f0c99a41d53dfbe1c764aef","efdecb6ab9f56d2ae6b70d807e5f09345e28bd1950c7ad9a2b94b34e9d855f2c","51e19f3df6738e183c47064d505ec3bacc0e38f257204eb7dc810e2f86d32c55","7b16fcbf4d88a1f5f59fc35135762c1f0672ac94b744aeaae2d1f90f53170a38","f55d259140b1887f40efd36dc62d4702f641032856993f66621d17ae5fdbb64c","7e11d89f2ffe47873f06394ae6eb73c488c18861ee2d0ec6b2a058fa7259ff17","dd6255aaf7c8114bddc5f1e003a8869fdce442eab7e68a185991db8a5dfcbeca","3dd0df3aa4d54a1f18105ae8426c289b2385d33e7b5c455288c08274c2c3ddf0"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582684999 · entry 108e9186e8c5677a2981…
Expected log hash
2b8ebe4eba52e1c2223ead6031d4eeeb67d9ae021114f03e62b1ecdd41675bcd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787631865749","kind":"published-quote","locale":"en","page":"theme:cewe/durability/en","quote":"Actually a quite straightforward app","rating":1,"review_date":"2026-04-19","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id583713833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dd24e9f4e2c1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.