Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the latest version is interminably slow”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1739e6d6d3476d1e3457fb3c085807536ceac4b233e72c4e2f0d2d3400968cd3
Signature (Ed25519, base64)
QFMq1RQVnXjTxohTNQeaqCQpYIVXLzbxXaXF7MINia1WQHTJ4fBKB2TXBml8j5jC5dOXeLWZT0zyYZfMseayAg==
Merkle root
d4c4aaf139801abe64089c6a646a11881b578559d9cb7d88d2fc9332bf4b830b
Merkle path
["17393f026d650c9e0ca78722eea88e9f73c15f7315169e8c8ec85117aa7dbff9","ceda02238ce940f94b0635f996df2533994c0fc1e7eae5e32f0c435d41c3f384","6f7f80d59dc08fef067f30e870b0b3554a0e262cf85e5a5eb0d0d2bd19eeac34","7dc303844c87b965cc837b692e8e79698402b7fd176e21a4c9c2c2fd27974a72","b6c653299eb86a430fc57864b183e9e349867faf2740ee2d6b286b99bf9865db","d007f40d8c454818d11193f407a6b3e410d4934a54e7ce81eb8653c81caf98bb","b7e611345f6e90cd42d192521bc6ac3a3b0a4790730434329822da1b9ae1ed4e","8e02f4e4712cfcdb1cdf5c5331172a60c4ff909fb490c32664a77a00a872d0ab","ffd0e9471da0a97b832a492ba665aefee0268d839d531aba84e2925b5e11397e","c07829230eb5ec021924703fbdb91a80d96e33ea02c7a5d9e2bb8389e435bf2b","795a1dcd3b9638626527cdf2a2c60af799e59ec13da8f3943179570114c62760","16839e2960004eed2bc8f0c311c50c6d24a7f3fff8e787bd6e0eed6e36c00e8e","6100b8f7cb9a0ad1a2de57d39552d426d438448f64577a5ca4cb2472f553358d","ef527f45d797e2d831211fa20aa17755e8de8cd626bcb27abeeea7640d159dbe","9b3fe954f7b51d7ce6fa763f00e1815ec4c70f892ca128b9deb83a2e107b9fb2"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2683384390 · entry 108e9186e8c5677ab9ad…
Expected log hash
911a6ed7ed419f928c9567229b2f9168f943e91a3951514581f7a3ba93db232b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788324112523","kind":"published-quote","locale":"en","page":"theme:acrobat/ordering/en","quote":"the latest version is interminably slow","rating":1,"review_date":"2026-08-08","source":"Apple App Store","source_url":"https://apps.apple.com/au/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d4c4aaf13980…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.