Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's too inflexible that we can't place text where we want.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
142e3bce6a95207914676dedbfeb5af65bdd30816eb1800a783448bf75461985
Signature (Ed25519, base64)
hS6vPPiwWyVrT0HEgdIdOTTwvsk8EDOBY8Mw5O6it43+tGBfh5Vxe2VZv2JyVIVHJX3p0PzSQwfI1l0n5q0BDA==
Merkle root
e880a518ba68bfe85ddff87a241b258528b2896d8ce031c201c4697c0b7d2205
Merkle path
["142ee1091c8a56317564f2b1ec22066fe92d2bf24e8e237e0e28eaeb6279c47c","b316f1a61f40716d9fdfe26b8ae88d967a79f2ccef309862ea7c209f3d94e791","676174dd4f43f02c9e6159372e4b2e1daae7c994dfc246fb53ebc2a18ffb5eb6","7bcf774d972ffbb882300351aff2a9356ebf3413fd9a80879856a7a2a8031529","afe423df1b03eb80fc58128061bd8fb00bc024ff9133189b1cf46bad17e376c4","735489ad52892092ef659314248252ff3d14d8940865f14f5b468ba935abb6e8","8fb280c319cf5d5b66c8b917aef15d4b8a7f6aa027cdc06ab3e23b3d60651d0b","3f11f890b25e1b2b85fe5e4989e8fd1395a86f8af4575eff96a79c83d92d84bb","adb591112dde74d72ed67547eca82070dede0fddd0069623f34ef4a5cffa62ae","715aad56376858d8437b61398788421560befea2e95f91eeb7cbfbf3bddda275","aa45589d359646fdc7cb3b7100f296d51531a91bb30633303107ad8c4d1f5594","8abd4d5b06b87286affaa0cf89ccbc72d6059bcba0e452912cc764aa4f8b3a91","0e6818b49626845facd47486279f7e4a6689ed0beda657d93a969ab184e1e0de","8c997d59f41540bab49c6414578aed00ec9a73fd31959523b43a0af5a2eb1e86","269c643459740a67a842bbee9fda4a35b5098a4f015e508a69431212a0912770"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2680681799 · entry 108e9186e8c5677adf7a…
Expected log hash
23ab6878cbb153d06d6958de44ea3fafe32bd61b03ba95bcd26de9e09248aedb The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788297623062","kind":"published-quote","locale":"en","page":"theme:pixum/material/en","quote":"It's too inflexible that we can't place text where we want.","rating":1,"review_date":"2025-08-10","source":"Apple App Store","source_url":"https://apps.apple.com/dk/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e880a518ba68…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.