Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“making the app completely useless for me”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0e150ba70b219ac58108a5e1bca49d9d90c1bf8f2a8bb7a9fc1d8071a58d2a12
Signature (Ed25519, base64)
Fa1tBklR5cJgNRub24D3+dmF0QNU+jLrOe1QJ33oS28zXFgl3ZjF2xaRTOuUkHwPozFZczwxHE5BXS2cQzNeDQ==
Merkle root
3e5b84dbb37ce6f75730ed2b32f91cd71f3a65addfb4db0a36bb6e93c637284a
Merkle path
["0e158093f73d103bd05dda93679b1aea1bc9d9e3996cf64acd9284f5d8f40fbc","309f823a03e3ce610d325cf591d7b4cf41e0c22e41d726956aeff1a68dfd6e6f","285e73263d5d9e62992d01728fb34abaeaac661be8cc11bd0861f6f4ae1868cc","301c325bdedb12f0b527fd43671a7142ddb06949a5776ac5fdc1de95ec546bfd","14725c2c0b436af4d81cb858a7329011ce544b3ea411903177848192e324759f","d47bf836c9c615e5c2bcd4c624b143d4d410b8d0944a1d1c383ea1503c880e35","1ed56732510b1d5cd0f381723b714e2791d06516b056fdbecb21271146977132","cb542165d238dfc23c9ecadf63ef404b55b828ff1a9f84d36fd019f1f8d8e836","79984554a79cb9b974ec675c830cd677f07e738536ad23a98f1fa14bab629180","4580a236d5024b3e6fe2d88d7e0dfd85749c3a2ba7321979add9235f09c2c80f","07e586853ed7df60dbef618524eb346f2dbbb4d6eebda4c9559f971e8876deb1","5e1d55cc495e25a055082f31061576a01811fae87e315b90c56cc742da8c21b1","09ffd4ff7f987b3f51093f1e58033f05d70251a8231cecee13929f5904d44057","4b83a60597c484d00737793c9d1e20749c33d1394631936e64d7dcd8530ecde9","359169a64f9c96ceed911524de6d7935fe237a0309f08d7968d6105d6218494f"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621233673 · entry 108e9186e8c5677aab9d…
Expected log hash
8f69f81c385ed6162582e2743ec87609f0e5a311201997ab1f656c8ded6f904e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787884205203","kind":"published-quote","locale":"en","page":"theme:sevdesk/fit/en","quote":"making the app completely useless for me","rating":1,"review_date":"2025-07-25","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e5b84dbb37c…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.