Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything is tightly preconfigured.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
15aac313c46dcbe1b7b1be0657b90a2227b99bba9d5b71021ba6c2e9b72b0645
Signature (Ed25519, base64)
0F/eCUms2kzo33WRvZngluQqVklx3oVgjIBv89jqRqnjWqCcmmITejt7nUgpL18cgxpOUOq5vMemiDJ0OjHpBg==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["15ab4ab6acb8fa69945c35f3cf05a4b6142c15c3409e38c3db47733c86865e05","0410f4de231453fdd49c00676fad99d03f44b5f3931c76cebe7a36a5ae49635c","5aa067b50e89b94e8026ee1965dfaff1c89b6af1f8787c3f5c923f15a842f93a","53f37bf556573b9d3cb626729ccfbb0dd11b23916b9fd6720bd5c2496765fd0a","df44a238604f0ee11903e17057004a2753dd8adc6d5b95fe3582a49006bcc30b","90bf32a5fe7d9145c50c9174dea5627b7a3a349680b3ea7164ab75158573089e","86b1877aa2d344e976466554f82b9590de52ce8beb49d34e0ee409a4e6fb1634","3f346d3a8d24c1a81c443a825e7f6683484c0b42198ac391b3ccb3981d43a35e","df344a91ad0fd471aa5b0faeeceda700d851dbd2203a5c095922b5481af1931f","a49c7a9bc3463e005261991e96402e455227410fd41139ac8b57265519d464be","6d15f90ab8e769a59a090a266a6f4d2df804e5bf8b9615e583460872abd2aaf8","014aa84ee0e0a7836eeb14ab69445e541d9915a258408a8c57d3f43d0beb5ae3","3f2c82e50b36e0cd50998d163cc94eed6761dd69609ad29f5eed30a1c7940054","1f7b489a0f1f52a9099db1823d706668c4e68c1e17b4e235c9596001eb5af1b6","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:sunrise/ordering/en","quote":"Everything is tightly preconfigured.","rating":1,"review_date":"2026-03-01","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1231971182?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.