Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is flawed and impractical”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
106dabbdb553f403e56c33b9aba65dd5dc61743b909c881a64b5442a34a3c797
Signature (Ed25519, base64)
7WtfPD3UQN8opzrV3uAPOUFAj7Xpcch7eN9XNZ/PHLOPNb8t7Y39IFo2NgyyE77n0PdEh/A5/gHOOghEwIQsDA==
Merkle root
daceff63019f1382850c569367d5bdd590ed4595ede014f2eefb6ade2d806300
Merkle path
["1070266c43f7f95df3807ecc77b542840444c1611bb1572aa2099d3280146777","323fbef65f22345dbcc7b53de9c8c014ece91539058d3ace96f247be500654c9","815937ea8f1acd65c1267ff19262d23a4ab6b61ae1bb927c3970a819ac1c4771","9bbf4856bd1ab752a4939d7b58b5ddae76e44599df12f89906c626fea0219069","f49cf1a1313498230b724816dcd049a59844b8afd98e3676f6197886c3252e21","39d6fb3e2c6b1afa5c4f8c0a74fae0c3af4edb7eec480197e80770c4b44177eb","ee2babd7e7065e6b9e05f73e4a47473bafe1221167ff6bb7eee2f8f6dbb2a5a7","f76d93a760e42969a5b7b0709e87bbe1935d71b1ca1632d9e1d46bd3a296de5e","50e0390bdbf6c75afb5798ca2b89be76ddedc8bfed344e720d5f52fa3c72ad39","b167ff548d72cbf2ab46cf1b92d09a24622e2f1f63bad4b812383fd973be3c8c","c133d580b70ff862b0bbedf9018e47502e8b9abf231563068ba34c099e7a0eb4","4eb154225d75b2fc9623b30803eb8e6cc17e88812a8398c0b1cba20353eb7721","c9a5d3209bb3c3a2fc96073deff7ae1f24ae948fde60a1909715d29f710d4a67","658530d1379fb6dfa08978b61c4f970b14d7010c6440325a1cfcdd219f217d90"]
Anchored
2026-08-13
Public log entry
search.sigstore.dev, log index 2444811071 · entry 108e9186e8c5677ae518…
Expected log hash
2aa059ff0634c0f19689b671a4618bfc73026ceba74535f0e877ac13568b88fd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786572717732","kind":"published-quote","locale":"en","page":"theme:pixum/durability/en","quote":"The app is flawed and impractical","rating":1,"review_date":"2026-06-10","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (daceff63019f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.