Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I could easily select my photos in advance using the app”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2682592437

Proof data

Record hash (SHA-256)

0ed5cfcc0dc8c6f62801d56b6cf7d7530ff7481c29e8ec71cd54169d62f4b668

Signature (Ed25519, base64)

1PkJ5qxd2R3ctsPOUTOQh72rxSAlgjTZUL3v8J0G8dZOh9eRZtgCKYoK7mqYxdisaUTU+dvmw2jbteXStiURCQ==

Merkle root

579ce28fe2708bca920b52a6c28f3fe167f796c34475f556d2646d500467658d

Merkle path

["0ed39fe9f39d41661926a4f5b04559fca2830c45271a389eb90e3b7b49fe716e","dccacb499f9370385fa3d827cf964e96d1e29510525da2988b8dba2b8dec7f79","87bad72559674a85afcbafcb3165e1fbf1f5f78edc60df4e846815ef9899d3be","2aabb90a026b6bc55308abd65e2d3f9322cbab50dccea5e95f46ada99c3a4457","4b33162d615d8575ee2fe6925aaf49678d8fc21cdb5ae3cdaceb6ae3f35442c0","8c4fc223b8e74bf5e4c81782fd69a8dd5ffd90fd75ca5aebee2c77105ff975ff","7582af0d7df1b3ec7a4eb050f5de445fd8c12104c5cad5800f9a9bc5e925070c","d6e940ff4fc706cf5404df24e24d8d5b3d2c92ec73d06e402ad6af2acd5f1151","0d2f81f543c9c62c332dc47aec83de2e9fb2156b2621e1a67351a725f7d68ab9","c54d61f4d4ca569e15d9fa0af9c8c777876c289b8526aff3c67e4e3a2360879d","8d77f4183d88864a7066da3222e1cdccc3a328a7bc9f255ec52d78feb66ea37e","b63af60aa0695369c55c72d2d202d2a5fb8536581ea7aee331ad3c48eba05954","875317d07bdadae00897a73a7f1bc92eef1edc4a674a08e89cd1f30fbe8a615b","db157fed828260fa197f9066f6b89dc0d54f95a65db24f732f440b0995162421","842d900b1cf416b40ed647fb564c02f9f1047f8312564495f259853a966fa9e2"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2682592437 · entry 108e9186e8c5677a8bdc…

Expected log hash

0cba4b3248d53abaf7e1c602875f7199dc2f8f0ecf513e6f05c7e522db47bff2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788317104782","kind":"published-quote","locale":"en","page":"brand:cewe","quote":"I could easily select my photos in advance using the app","rating":5,"review_date":"2026-03-18","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id583713833?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (579ce28fe270…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.