Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Since invoices are hardly ever sent by mail these days”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2647241519

Proof data

Record hash (SHA-256)

131d5ae1947b1b7c28af24a02579f8b1a53cf6c0f81f6a91384162415c31b815

Signature (Ed25519, base64)

deTHMAIs1sOuqD0CQs1G64XsjWSqsqnipCUU2NICEeNx/fP6Iwd5g3K8ABaNTumUAsXMgRQ3EC7SssAfvL8xAQ==

Merkle root

f1675b25d5466797aa702b991c0807556a3aa1a9c10b1d677032c5c3e40f1b0d

Merkle path

["13208870fcf0462846c220421bc5d43ea8b499651d65ec0624ba4d3191736f77","14dd6aeb70d9b8c619105372297579791493ef25576b84eec473ff628f2f17ea","abb7fd1107cfebf472b9ef85a8a0bff6e8fe1a0348bab8383047cddab92b7006","519332b37fe1c23b59058b26a4a1174d5bf070430e81d1fefc8726325382ad6f","f99c1b2b3c8a4d64ccf4fc16ae469a7a341b4859c07ee9ca35c33c82b33fc999","8c027d8b2ffc64fbfad69831151c61bfd54b3c44ed0934ef1e82d639e7c33811","e298a969cf708ebe62508803841a236e582d0cf23a55ac999fecfe9e8a3f6c6d","9197cba8ed82c28d3cc72c13cfad352ffedac1ed75f771b218118d4939e849a4","308a4f66645a9117e85326f647553169a7608364f3f496652d65db469caa5976","c70f0abf965d38b38ee079dd6a0c87ca2d56e55a9e176ebdf03c8206925fc5d2","4d2216ce7c6723c59697c4457ace838d8c05a581f867394eb8bd16146e5c1bf0","bb07b753a532484beec930bc15a2de97be9e2dfd3c76d73f50de381cdc9aac91","eb2c0760e56a26a302dac6e5e45cd28c832dfdb704d2fad1f950ca9b04c06ac1","ffe25fa82d2e39f699290daa5fd756c6fc66643a11e22672ded33d0c3f3dc940","5fe831a43839c48bcf12b225ea332c8993d31242d7ee3e005d566c8030d9fb31"]

Anchored

2026-08-30

Public log entry

search.sigstore.dev, log index 2647241519 · entry 108e9186e8c5677acc32…

Expected log hash

b1a9a39ed2ef6e13fd8c734573349e96c5febf297457b76656f9e7c62e15698b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788056210386","kind":"published-quote","locale":"en","page":"theme:sunrise/communication/en","quote":"Since invoices are hardly ever sent by mail these days","rating":1,"review_date":"2026-07-01","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f1675b25d546…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.