Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I haven't been able to access your app for weeks now.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
15be184c783e934e9c05431b888f2aad48868a7bbe7f5702481986ee25317978
Signature (Ed25519, base64)
yQQ2pQ/FCgOjmEQ0EsqcjJInTZDU3cJIClPhXj/K0Ox48H8Y8GkUGir74/dFmhPPkZjbMXqGiIIROKwWWQWMAg==
Merkle root
b839fc90680d59ef42f94824bc47a43844eda063a2dc78e98d04cc6ddfcb474c
Merkle path
["15bfd823d2a75eb8f4d5b5b1b0d52b5a49839dc9234b949a9b5b1f2b196f93c9","efeb07f9ae0db3295e54840656fa4140284c8b339148e12cc301331f9dec3115","983d245277875d343c930d3db1a15c6675734a2cd7d52e97f8a85613b276db45","94524b0c7cb4b61a4f924fc18846dd7f0d388d116d440406b96e8180e59d89eb","8063cd74d2e1c8d6a9c00d00504bb99a2e53238e57d87a6b31621c5b4b47d8c9","19b9055f6780d5ff5de1983deef941f5b89273100c7bc82f986e6ce3cf8d551a","8a50b9b5ca409a9e7cf68d90db0be8005837a8a09e5ca40810d1d6966e64ae52","3de8c2112c23aea804e02684b3bd6fcb9b815f9071326a257f5716e4b5388e79","49b112c0e24a1ee3c9bfa04ccea1af4ea6d89eeed5bccbd04bf8dd79dcaf4c21","7ac0d36ea86c30ede0d0c2f2dae7e9d90d564e87b982071c68daf3c4b76c2138","750c5f53d9d055181e77522d6709b82d34376998a45f8b92baf4de3d09632ddc","da3f18db4275ea305f12e1c8c0800014ede0f36037fddca212d2e67d33301687","93cff867a371eca67187fa18f29672e43dc122f1a11ead8ce02d295afdc520fe","2d44a3f2a338515d5139d8c4d918da71ecf66353dbaf922a6fd5c33bea9ae2dd","53cddda7a1b6beb992bf062aa34497189c716ec3be3251f7e5db0dca344b1a73"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2594765087 · entry 108e9186e8c5677ad8ef…
Expected log hash
2b2c4baead5a20e634c42acc5e7cfc8d7389892f0fc879f3c38d7eee1c04ecac The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787715994367","kind":"published-quote","locale":"en","page":"theme:sunrise/ordering/en","quote":"I haven't been able to access your app for weeks now.","rating":1,"review_date":"2026-06-10","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b839fc90680d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.