Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The problem has been going on for a while”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1718e48eb64058c8c0ad805faf069618ee0f2a6f75f786d3217be33f04f1b434
Signature (Ed25519, base64)
wCfY4DOURNNaPGXaRYh0huYyofYKR8umz5AMvuubxop+Cy20tKbUZAVkceO3gGZpvaC4GYx2D0E6ijvaxX78AQ==
Merkle root
c768716b2cb21aabc39de506951f775443418285e2c5eda072e3b3c2d945945c
Merkle path
["1717c2fd9b8ad957f3d9cddaff7ede2b9c8943ad809fbbdee6aae3332ee0bfd2","66e7d6e9e8fca008c249783e69dfef6e787eef75228800b4ad6e05513da79fa1","f848f51bbbe149af8bb199597810944c328d077998c80024e80bc8cba59a934f","23ca906eb633f8da3252c3ac572664b364d67e62fd5b9e636fa168242d9c7c7c","de3bab5293dd7a160ee49af0f82f87b6cdbf48d34803e1078963a2dd09f7055f","5bf8dfcd9a8f30ad7501764e9de78f5a261b7899b10a3b0672d9127c8e7d4e55","7c18f942b0f34526e72b21e1d3b87dfcbcc17142cde08fcc396bef3aa53de51c","951b2ab4f1fde375a934becb2f91729dff8b2d1e0c9904d6336bb21512f13239","1bcb2408b5edf2653cf27fe32068ea25edf13c2d6ee60a56fe579bc70534e12c","33f807db4d8101b5fd365bb0a64b483826f30c92834bc54098fb10c49c010102","10dfc38d92cb808570efd8b4da55b7412af5c5f73b2e89fc3d852f79952a14e1","2040ad8bb83c34fc495eeb8c9f81caf04fd90dd5129397bcf00a3351408f61cc","38e74f19a86a1311a4dbfb6ff75312ce32e1ae47f608a45fe54b6162c0fae8f4","58ccafd37278be2b9508db439c14e85a319c2716b397eaff7c959a5020ac606e","4c61c84fffc3f3248d19b221d821cc3f0e04d1cfb4151bcd103cb5959dfdd5ed"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579644936 · entry 108e9186e8c5677aee79…
Expected log hash
3a9c8e6bb3b2990f2171448c5468a63b9d6f8bed98ee1b72cd7d6f73b4663243 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787545182186","kind":"published-quote","locale":"en","page":"theme:sunrise/communication/en","quote":"The problem has been going on for a while","rating":2,"review_date":"2026-08-06","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c768716b2cb2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.