Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The new version is a bad joke.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2685255068

Proof data

Record hash (SHA-256)

0e04dff3b272727903a371be9ece9f2d1cfa5c0ce7da5dff3ab6729a3d132c75

Signature (Ed25519, base64)

ixkLV5KsFpk258SZ6ZMePC7RHLHRC6YQjG+6Vn5JrS5SxUvr5jxkoF/hRH34ALU+F7apWmMLmPHGO+zZu+3dBA==

Merkle root

baa63339ed127dee6c2b1504d3718b71e94c83f7a90a1da737d699c1b2205913

Merkle path

["0e04f5dca96d579900c70a2caa6e1e8a09d2c0194af7f53267f23226624a3d59","d020da81160ade44acf9a4d4c6634eeb6f2f925d8f8a60697f6ab50a2aee928b","0178a5a3f9f5cc8f74dda14aa0c07d98c81899b0e7b546d921bf4ee88cdf3d6f","335bb12f10f59dac7d808dbe18bd9773bdc47a7f24d2260e6eea9948ad1f1fb8","e2fd1ec78b0963533119702daf46b91239304220f5bc100083c93fcc1252069a","54d16415a43bff214d10d1c56b2c21ee9b38557739734cfc3fc94f7f4b16ef75","3c00c92a932335491c1ec7c36de3af9be808a8bbfaf86f87dfb76d538c17720f","6b85e1e94ef891521ef40558f7bcba4e45db0ed062bfccd803cf670acb1c0800","a1fe7d5719e833c7bd296fa3bb50ab469c14caa8195df4f44a8c30e0241a61fc","860caab5ef65436eaebb4bc7cb042ea3934cac93a46250e2ab62069098ff4630","866ac435089df85284784301c2051c4557a8d06a36a55e145220828746f98798","e2cf7144d23a312580a4836932a4fbe7f0ce303ac74ff7913d4c72f492af6b2d","eee880a255047d554444ad39a6fcc213a7567298f0f3441531c01029e7a71d12","ac24abf3a1c506aec2b5c0611268046e40bd3e23140aabc047f5c16f008d5dd6","11e6176a525c956e4f3a814b04624b93eb8f47dd129fbee2765869efbc5d4d54"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2685255068 · entry 108e9186e8c5677a482a…

Expected log hash

03e66e446ea90df8a21d7d402854ad37d81ce71c2336e953836f61c9bb1e4bf5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788348937690","kind":"published-quote","locale":"en","page":"theme:sevdesk/fit/en","quote":"The new version is a bad joke.","rating":1,"review_date":"2025-06-18","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id731738076?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (baa63339ed12…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.