Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Since the update, it's absolutely unusable and now the app is great again!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0d50b99b1927d7374b66549c82a1ba31c612bfdb139180d3127cff3d228a5820
Signature (Ed25519, base64)
OBChfm5o8MKnryWNmjlXkOLgl43uzzBVfXD1yQgmQ0zeKGbfEeyDRO6bskKNJGWABGuu3kpxMUZFjPJy79F5DQ==
Merkle root
172a3e0b3c9f8b02f52318e01ba6beb899404e00e91c15eebc4dea38467e1404
Merkle path
["0d52d24e882eab03ef7d427e380a95e71b59b23a5e14710a070596611f0f3820","ce5c60acb3743bbcb1bb178f3e964cdc2b736849e8116cea07bf934f3425dbb2","adf8fb7949355348b503cf034f80b0d3c40ba2b2e8809e077088c5c6cd644ca3","ba3accc866ea44d40bdc4c9cdaef435dba635bc1633347f7ae72397d7fd951d1","010fc4986a874b7123838681b906d93589a317ab22aa7036be866014de7952d0","c85e33191496ae33c5f62b8128e39125e3e03b35993dc178ebebd239faf02e53","9a08b224523ebcf95a5a97404851b21560fbed941a53adefe4d5ca5f1fdbb5df","7381fff9c33142b218880066f95dbb8664aa2b67d9c08da210a2c5a7a4dde9ac","ff604653e5e8d58f0411545975a3e6b024d06112292f39121d25c3d11f0b0a10","df200e91e939d688cbc99ac4f3906138872a97b47540a15c5b59645c51dcc345","b9f941e6f506f26041e061465870845d16c7c20ff6defa76d5eb1ce53facfec2","589c22da96e3ff60efb0f79f96ffe7af6214e9470898a7edd786e91a2a5cbbad","6582b4bd72409a5334905e80c9e3aeb7c43a20c5eb4c139595bd990bb777102a","b2e250a62b44b0b9c303f91afd3aac8852fa6af504d7d68ed736141a3dd71161","7731d0ded4f51d151ea3e84474d1e27a6279e8756420c93cf5fec0abf7f11add"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543025731 · entry 108e9186e8c5677a8971…
Expected log hash
19ecbe4a66d8adbd7c6057dbf6ed9be73485c248dba1e0c595279a908b3e8bea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787283443958","kind":"published-quote","locale":"en","page":"theme:cewe/durability/en","quote":"Since the update, it's absolutely unusable and now the app is great again!","rating":5,"review_date":"2026-05-31","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id583713833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (172a3e0b3c9f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.