Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app won't start since the last update.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2632728886

Proof data

Record hash (SHA-256)

1733fd0d52a9d4808d6edb849002477d2e683e56e70385e11c342eb0db50ace2

Signature (Ed25519, base64)

ZTOKnL5d+9rH1YKKyaede0BKT6+5tOhXEkjt7sGP/5Yqmzs2m7NPyLo91qW4Y51mpaXkRXvbEQ9U5fa4VTWCBA==

Merkle root

0ba1b80ff2165a62bc9f9f25c7b671d32a81a8e4f351546efb788e090f369376

Merkle path

["17349a1953589df5048d89282136b29c9e73c8c59113c7c885e8c092cd844bb4","ce1b163e35272007dcc1e1ebe7fc13bf6caed7eaf6955584c2a4efe5470489fa","d9f1d2f155c04c8b1b5998173e0eb50f86da087d4a46a2ba02e975bc4afe50e0","cfdddac56a4486b3d7341eb552c6013a0ea3e89dec5645b6503d8655ce5e0505","0171eaf7cc6818db6d98fdd1247e44c6f970dbb2ad129665640c7d35676006f1","685aa86e69b17705e79058b919f6337cdb65f16d4d4fffefc5a18424d6000ba8","b35315947f05e739fda7c5ad05153ef90774ff2031df48f1fcb466fb452340dd","f0f7c816b88e81d326957f11d8ae0945b1cdba66baa12f361c6d40696db97d47","032f17986a49accdbf641de89225366b652602d735e991f598d3f710e0a6201e","d3726eba4573524b7dd12d159a2ebaa8f73435b353f4aced3864546ce5fb3e04","33cbb318f490ec551167ede4eb9b00971e159d649fefae9f22b109b357c3edfc","aab51e2412790f739095eae6d28bc9b4f817dba064b561c920a4f60198d031a0","034ae9d01226d77eaba75b4d19165fc2dcb9e68ed53458f6ac6eae0fdf330abf","e3bdd9cd4a46c1886472a1771a5799292b1c8a1505c3320e374180146177f347","9c07fc5299395e9629e50b7f7f3c0b3bd92e7116744c8ce6fa87db9d24fdb3b0"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2632728886 · entry 108e9186e8c5677a444c…

Expected log hash

ba382b40bcccfd5823af39360159e6e4433d6ffa61f32bd2b6c045e496d9f4ba The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787975494243","kind":"published-quote","locale":"en","page":"theme:sunrise/billing/en","quote":"The app won't start since the last update.","rating":1,"review_date":"2024-09-09","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0ba1b80ff216…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.