Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Way too much English”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
137161be6e9381deabd6083dd9b5990c577271cf862ae1a96d3714aacbd6e060
Signature (Ed25519, base64)
QWM5NvbpF+2NsZqppqslGIVcm3J9F1/gPIj0bMeEUrcZFdvGONIMtHVwOxZk2pbXA74KsvuqkGgCUMWkIEwNDA==
Merkle root
394ca2392606a3b04285deb57e7eaef6f651edc68cd81b9dbd21e1df7dc54fc9
Merkle path
["136fd56dad680fd1025198551ae1da942878b3b19965db21d3031eec2b494e2b","fb70bffeac6be7eb7b3624b045c2bda68dde3c989319c367dbc030dc6d44f8a6","0509a99837b094324600b27ccbbc20565837fd39657058ce4758434b37530ae3","85e12bbb49322c5666ad2876f130210a2b2d91248727c12f3a0eb822babd20d5","0bd28fae0502c4d45abc82bb3253c10f4200fe0aa29a3cfae86e0a42b625db7a","a74883f5dce0bdc6b42a3c7355c7ed3e247e5af11db57b99a0a9c7392550d07c","8fb888072c7f129ba287db275a6b92ca23354544fa3864d341c5cc3cda446228","1fea8d7f9cc8848374936cf52a05ff469b3ee33df2ae792264babf03ea413942","f331939b51149e56e362d08b2883bd19d6a2d65f05852a254c48b493a901b164","968c163a0a325ddb85631014817cd17f1e3fddd937f8434e69181feb288ef197","b4af523d5874b83b0101def1a80db81798c91b854f619ca798f144999f26e621","ea300b9f1ec6f76ad95d40f8b2658947f810ced6129f4f7aa3346c2489d51789","b5d5fa09aa8096ed08f9e7367f0f812c836601d81e243eca35b79920ceb32bce","54146392ac4bc258e4e7061916abf0dc1399d49618893603dc99f51d4640362e","9d8f289f39075353ad2bb2433faa71c2a69f17cbb3019524aa8f0a248c7470ab"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582632102 · entry 108e9186e8c5677a3e35…
Expected log hash
fda432c87b1359c3ecf3aab1f5f6988c687e98b4f915b2856536280c29d480a1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787628086357","kind":"published-quote","locale":"en","page":"theme:proton/communication/en","quote":"Way too much English","rating":2,"review_date":"2026-08-06","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id6443490629?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (394ca2392606…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.