Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“great value and super easy to use”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
15f27c9435dae8737d20102fce54141d13ffb6407ac9bcaee952d6c7cd234181
Signature (Ed25519, base64)
QOXXDCnHkST0BS74Zq7WRFv3k9N6h8fBYMvckWAx+mKPVwix9tp7s54HyNs77VQ1yy0CaazFVquijhlT/70xCg==
Merkle root
8b5970f4b146530c341d90a6af2810c5e81de90ff6866f5f7ab1feb7b3b58339
Merkle path
["15eb66982711fa461f755037c329339065da0b55fef057b4b2c394fb4c362b1b","97a50555c1c1854cecb52456610377ad75ed19597b72955dc14a84424378a3bd","9048389af5fcf0455d015d55ad00bdc6bd6fc83bad7cc8b79a504634aff16d82","67c123962b166ad65bede6f8c775b05f5fc2cc9454b5c94aa0773897cbc75bee","4f1d46e094ca8b1942d8341369179215b8f7e21c3fd9a99ccb44b22339f8e140","536d2252e663438b9b2db3da0ecb482dff942fa518c412413a35ee63ad9dddf3","86f979cc29a2df7967bffa26c29346a27c94728388a4452bb7c299d84973aecd","0937b74997f30b9d908726339f676ffc3bf66a790082afe433c9f0f6829e9c61","e0394503963692424c731ca977fdfd4f734eeafaa228020d2e13a238e3678113","b60f003cadb0a9bd126fbb336f1b43536b5770087ede159851a10833698961e4","4617bc2325ef4fcf8ffe16450ffd96096a5b7a80acfe8b29567c0184c00125f5","a5f9e9776da24cf1d72732dba510c24b49ca2ec73ff090e98d3dde783aa83a64","8b569dbd35e16a3cf6284fcb35d07452e370b6f363612f06f907e8dd9c1e09c5","e10016342536fc9141a66bbc7dc7af86f923fa1702e2584c59b9c89c4f07f20a"]
Anchored
2026-08-16
Public log entry
search.sigstore.dev, log index 2483496382 · entry 108e9186e8c5677acf0c…
Expected log hash
9e156a9df8edbfe61e2aac6bdc3033ceb5ecaf971b297c4e0a7645214890c65d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786848988221","kind":"published-quote","locale":"en","page":"brand:findependent","quote":"great value and super easy to use","rating":5,"review_date":"2026-01-15","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1510962836?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8b5970f4b146…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.