Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“no notification is received to revisit when this occurs”
Apple App Store · 3/5 · 2026-04-08

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2647547434

Proof data

Record hash (SHA-256): 17b931ae29fdb8ac924efffaefda5789963abbc8cfc2ea60f0ed42ec3283fc0a
Signature (Ed25519, base64): KgmIa1HnRoI0mHPZCcPxkmEhcT2gvu1auT2ovxtbrPX+ln9WMV7zh/miP1BwuO2Hp14/PLgqi+EV20Sy0U+bCQ==
Merkle root: e4013647f339499bd419bb9f69745e1d5e6273d32dd17f94b6c35c2fc080d1e8
Merkle path: ["17b2495e4f91adc4e6ff3951dca239d4c0325758ba45c9936b7c70f067ef49c6","557c9d92212517c6891c8954158b59042c30a39efa1a5f17eb033cf008ca330a","9e7c299a2d30aa5db5ca839532f0b256acdf01a1185c9aecb825499c35d6bba4","e9aeac5535e319d0bc9566d599c5cca9d2cca73dd5742e8b925f3dcfb45f64a1","493caf6973f41d953ffce61159ede64a9c589296ec3fa7471527e52745ef10bc","1a794161fd9e414337b4438bd875226a4261d617987e2c6412af6dd9e8e7bd6e","eeb576d5f34a28524250f2949b1d3159f7feeb0d3410128e11e5b04d32b82385","adb0144fecb89854e0512462954c8174e981fefc5442d44b622e8df28d5b312c","5adfa9afe4ec47cc941a969d66f891f9c72965926671ad96edc23dc7d10f9b65","c06aa84cc112352d886c4dcc4e61b28729e70b16838898bef67e60ed6e4c3166","a36cab5491d2807ba5fb7ebc2b65fb21a05ab363649367815d25c6acc3108b3b","bb52c168a6f46226a9c856cd5a8e25a9df7d5413683b4d9a047cf89d5e1c08f4","df8342363186f2e3b45c88fa26a77bbc6852f833f9b39f10d9c7965a0af52872","3b1a28d2ad07744c06a00c9b4786a6cdb14dfb04fc76bcc1cbaf73cffed41efd","d68efe45fdecc3c76847a618a62019c7deb410aca5cffe58288bdc27d0bcb771"]
Anchored: 2026-08-30
Public log entry: search.sigstore.dev, log index 2647547434 · entry 108e9186e8c5677ae1bc…
Expected log hash: fd8e30fab5cac12236b44671823a2259ebb0774adc4d1a33fd6a7c90ea280d43 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788063921301","kind":"published-quote","locale":"en","page":"theme:sunrise/billing/en","quote":"no notification is received to revisit when this occurs","rating":3,"review_date":"2026-04-08","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id466738063?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e4013647f339…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.