Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Every time I go to use this it deletes all of my work”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1470e5e978b081a4e824c03033609b6b2d4ae72c1b8adfad7dcd2f7348fdd2ae
Signature (Ed25519, base64)
hmUZk3/jHuhFQGqUSs88rcW1utVLtFz54v+nT09ggT1iAAacEzaZRy/iRrMD2DROwKLVPyHV5/UtSCUcKJiYAA==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["1472934c174d712500831f919ebb596dd1c37966dd71ff050153fe0b5e01e964","8db26be5fda71f368bc0c8eee1b1c488c5a7c8cb29a2c03810c8af86e0501a8c","3a4f2db7bf074f634b0129548f1b2e37ae63eb3de5fffbae01becfad007953e1","3216ad73bd5ec44b4dc9e408e83272c61f1a977cd44d3a12c278e5d15d77d57d","0604bcab9d48fc1a358a0541a7f0751f8a3424a30ad233b8fcfed8297d5b7122","aafe545c8a8394190a2b3497d781d89b2bf4c7deb84f8ca74e3d9cff83f943b9","d79aed6c521c1a28a3aff796a3dea2a4dc5894dc6daad464992f802d5ec116ab","2c38ff9a5e4160d06c344e058ed5e4a37d87dbbe57f5c9317b32aea293400659","e69d37dc29b1eee0a68d69779a4c4bd577fc47454ba58c7eb0b5baa3a2575213","615de311f2195b8a081f2f99c862c312fc619c5fa99ee048b1764dd18d57a587","c4be5fa985850fc4dfb3ffa618b8d550a69f66d3d82b49db02ff30ed91385483","d91641b993c3e8dfe69bb82ee13578bbb33371688b0fdbbf8fd534bccc3e9c6e","a1c11df65738ffb18228c247fd6ad5fc76428a9130a0079c6abf079e9cdfe043","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"theme:canva/fit/en","quote":"Every time I go to use this it deletes all of my work","rating":2,"review_date":"2026-08-09","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id897446215?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.