Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I also didn't receive a notification that my order was ready.”
Apple App Store · 2/5 · 2026-07-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2525010456

Proof data

Record hash (SHA-256): 0fbd172bf5882c533a99130392b2583960899f429d3e9626386f26d2064712b2
Signature (Ed25519, base64): XEKvmN3ejos5LP9TZnRdc+VVjgVI+m3lTTahDI4glUZH0kt8hS3CFM9S15WAbjl5AjKggnF16CCSm4yexRcqDA==
Merkle root: c69b412346f0db8d88aed17dbaf2e4876a3743c1c4d16fb306ba56b5c0573123
Merkle path: ["0fbd187dc443e1bc45326ca4d9680fb9781d1380c9bd52fb9cfa6c40667a0abe","d956207d23889eaee69748ed99c0048bdb08c281225951ed6dbf700dd97c295e","3bc7b1241e4c5773b14e5352e9b782c726a57ea2507768c5f8923e84018b4305","12a1d453eaa0e5d1cfda3da5dc5d56171dfe39db18ca1bd44f56246f46344e8d","9ee219346de88965e7e945fd42555c10219470c71c94f3dcae7a5a04c54ce1cd","1ef3c855f99ffcbfbbf5477a074fe95d88593261f6f62699cae792069b9573df","b3ff08f770a8d5b95849d1c82287d87e2fa4c4b1f93e21a26a8df30ed7ec64ef","18818e7c4659f08fec5d3aba92b18f4f1fc7f013a74dbd88c26fa89c9e1c2e04","eb1d055c78c078fd6af4b33a9f21a05a8dde452278f5ef771244fe17b75610df","1e2e4c59de6d2e5fb3b87a002ada59e93901191bbe969df6bf860136e9b19a6a","3ecdb6488bc871dee592d07d294f888284dd90943caa250d8408a88510e19f35","d2ff7fe4617f0faeab86be5a07d9e5994cb2c5055379e39ba5f38bc3f21c4e08","09997fd9b1ef8c57766815e6c9849e05f2447cb27e8d805273108da18c60273d","62927e8f71080777dd1935c21221e60b742dc0377a31e2f20a0a64cf6c3282e8","3da38b679e2392986aef224a332d14750fb3a22c4e75287765e8f68f575f24f3"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2525010456 · entry 108e9186e8c5677a4287…
Expected log hash: 659be4fcc7663b2dc65a53351e16497fea44ed9ec8aef1f3c48c8e452b350dc6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787194832011","kind":"published-quote","locale":"en","page":"theme:cewe/communication/en","quote":"I also didn't receive a notification that my order was ready.","rating":2,"review_date":"2026-07-23","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id583713833?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c69b412346f0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.