Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“So I get the app and i open it and why is there a Netflix logo?”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
13de01bf9463081b4bd6bb66eccbb1d3c116ff54ac75c8db34dd3b737021b0bb
Signature (Ed25519, base64)
3A95HaPdCSs5462np5v1WccLLamb8RdCN1OSypPsrIGYLk+7qfh/T39SI6Zv7d4TzAihkhKbTh7b3EzWUgmaBA==
Merkle root
6ebb2d3fb78e4a08533ac6b6852f3c84687141ae9b0e78424d88bb4161267bbd
Merkle path
["13e0bf4ca788533946a32d0845b2c233b2d8314638d0b5822d92898c5cb440de","2d86734ccbffb5bb7b49521064bacc1d5fee289112592a150c731e84a6c66a05","672379d656d719fe9286457722d26349a4a49d8874c1bcefc3720814d5d2926c","5c35f787411cd9d48c02a1abd848a286a012ddba442e4a647ac1d319f9154a6a","a7b903974ddcc1bb466be7850171212c8081befa7052597b2434801ba2ab8aed","fff6d6c70464c0fafb3d79b5ffc5c7815597fd9a35e4b32d5507a8de41f0421a","a9482b8bf02cfacf868e1de15472e7e2af7a83f6ad98b057c48f303124199af1","2374ddc1dd8e28ab4564b07b29225b263a1ee91ee02604042e1eb6ebd60f88f2","056565e321825599e14d605aa13f03bdbd6c67aeb7f18c33314ffd3027823c8e","8ab4829fff01c9e69a86cbacaf8f4e8d04582fac8508110de65ddc964958ccc9","aa2e036eb98bd52190de0b95f7750b5dc663ed2d2f55dbf32cce04f860e4b44e","fc73c2b0627636c8f676f008d05fbbd4dcfb7ee0af08432d0bea252601b2007e","b2809ea8af334e57adb596cf07ef2c411ca41ee72761a0ae0fbef01d75a71a23","32d6dd564d479cc6b7834d44d5078d8ebc72c40210e72f0d380fac04d2d8e87d"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3273209361 · entry 108e9186e8c5677a732b…
Expected log hash
bdbef22d23477d2ccfe2ed182ce8ec54934b3bae489c9913db850af171e33062 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792121074379","kind":"published-quote","locale":"en","page":"brand:storytel","quote":"So I get the app and i open it and why is there a Netflix logo?","rating":3,"review_date":"2026-05-14","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1608097488?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ebb2d3fb78e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.