Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Paying for some books”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0ecdf670e29548282a2f1b00373b2fe2deb1607b6a835d9e14e7ac5113a025da
Signature (Ed25519, base64)
uiM7nKG0TDRPsdoXJR57G6PDevdj6xYQN1DkraZZE4ZV41Q0ioCq6sTPQWqZvHY1tDHVDn8XQQ8/0XPq5Lp6Bg==
Merkle root
825dbc6ca55f00c6c81d8de0f7a080bad31b79dfa0e721dee7ded0e9c294ebb9
Merkle path
["0eca46d4cfd24a062c467b0f5162b46a942fd15ef0816d3d9a78e96585385fec","bc797d01ada05bfdf8e3496a0f25e21f2e4f47995fc1258f963f2e3dd6e052f3","d2de5ecf128dd7260d7adfdcec6058e00777d407ce70b1af4a65d3508bdac3b6","3be8d935b232a045f723e6a0b8f4b07a8c2c63b71eaf66880f777a392c4b04ab","ac06573d8789a17414d0a2571458b4a04952d0e681fc5e8c695dbce9a2400847","e63e71182b011da8da92e855ec1c3cc68b48befb82b42c064e541280fb694eb2","989c6a2919e8885b59dcab4dc606cecadb323db4465985f4cd5a7cd9ca4c9c22","9211c58f4ad115e5885fd321f0d05745b0779699fe64bc68a89fd5421fe64d53","c65568ac4bf55dfb026384df936202c726e3374882206fae11d35fba3a729d70","1910ae8476868c79e989f65f38dbc68dce63cadb169f02f488e5b2ef60ffe52c","febf287b7c32a2fae856dbf526e351f23b5b8476b4c1b3e342c1def13e494cd5","9c0c076fec2f0fa7c1094b4111d2e5cedc7ac35232c509cd9a25439361474b1c","1e2e9420d8c4747dca96dc342727525f4c47cf2390ef42ad69829fe37156235c","04c4bd8a9ef95bf5648c9d023612bd1f2446e83a6dcf83e612d031a5ea30e90c"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3240422411 · entry 108e9186e8c5677a0ea4…
Expected log hash
8667b0db28913263098c19cb6387cf64b6d68b1b8f2c4242d3139d96cef5da0d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791861703078","kind":"published-quote","locale":"en","page":"brand:storytel","quote":"Paying for some books","rating":3,"review_date":"2026-06-03","source":"Apple App Store","source_url":"https://apps.apple.com/nl/app/id348177651?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (825dbc6ca55f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.