Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“handy for managing connected devices”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
15c073500b49582f86cb5169166a9180321adb5fc01f976e02984120e1702f7b
Signature (Ed25519, base64)
ti2AFc56qlsLLvnLheavjEKfLGu+FfZe6QnYf9t8mEzAfLvbBVdIU0xWmBrH1/p9onD9Wrx9TlbFmVNs30nJAw==
Merkle root
21e7bb8f2fd2dd8d8171a23c0a79176483db4731970a3fe8e0e328189fa103b6
Merkle path
["15bebb26881a855dda4f966c4b8b63b4bdcfe7486e37e5e550793372ad28f02b","2f76dfbfd747cf51b1a2fe436f85772786ea07e052d5ad40d689502d4b3b5141","72b0f9e9d4ce372861fe5354fe7d69c402e880b631fb9922393b3e55586a945c","4af28402ed3788d2651ecace2f1a895c014d94b86dc040c9b409b31f3600faa9","828b3f36f9fd5bc2dd24dcc229e547a71abd845b75e5102a740e47b6ac13693e","b8664c62c61ab0d83ea0a7d720f62987d4cabb92c4c90ba5c679796b5682f47e","51b6ca9cfbce8c27aa021b6b5f8b075c90b0837110cb66464e107ca32b233fa5","7534776e888a611451278073d0969a28f0b8d91917351b15c1d465f277d04603","a9ac557616352b997674b4eb3c49fa324c0d6db376f4b7b797beac623637b534","c00b881591615a93a29d902808b084252c7f0a2f706cbdf5f8ec0c5c63ce6048","88ada35bb78b27ede593e14711da944a3079634fdbb1e8fe2c1d64145e341bbb","a27949797d6acc76608eb2454a12e7fa3b0e23a9ff082297ecb4e8dc4f5f392e","3cea60263bc32cc376b16e1efd7740bffcfc93464b1276fab6e76a09df031faf","26fb1a8f86dacedb6315aaada1d0ce79d7f80a57d9cd232cbd85d2599cf8282f","2b3a1c21e085528ee4dbbc92da4d806c0eacec4cb4b4d9f473a6ecd411dc064f"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2622255255 · entry 108e9186e8c5677a7795…
Expected log hash
f2a0e8f2b4dab3949c746be15f65076279656fc5309daaeff038c9a778ee0653 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787896781880","kind":"published-quote","locale":"en","page":"theme:sunrise/ordering/en","quote":"handy for managing connected devices","rating":5,"review_date":"2026-03-30","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1231971182?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (21e7bb8f2fd2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.