Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You only sign up for a monthly subscription, but you are deliberately led into a subscription trap.”
Apple App Store · 1/5 · 2026-08-07

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2682933759

Proof data

Record hash (SHA-256): 18436153611161b374df50e2832f0ae13d310038bde5ab61da56e151a3fc00e4
Signature (Ed25519, base64): 0UGCM9o8LbpH1bntT6mC550Kdy0dJQ98ZwT/Y1MWw7S8nUS7WNjsnDlbk84PZTmx62UxUEUENKP2Q2A1zJoYDg==
Merkle root: 4fe8751e7d70c50e0cd3fed6e9eeb32edf31f624f79d82d9ec3817eddba7a9fa
Merkle path: ["1843bb7e6eb45a4e9ebb6f9adc0998e19b888f6b21a67cad45d4c05469e3a284","bdc54df6be193e10d4ce6ef2f13875192c0dbe3f1293a7cadc0e6c1c51d0438f","15153427ea9031c54436d336a4252979318b56002f56cb5b721e69d057b9b614","105446deb2bca6d50388ce73610cb3d43f1f9be417f0f2d07d978ba864fdde16","8112da52783f02e26c16d0dbd1111e8359fca178aabb5583b9430398611add36","4dcf780194fd6edd975faf2cbfc8c6ae3a37800846d89557e810bef6839ff34a","4ac0797f3e176a96b1022da23fa0b94aefac6469e05144768281ed84d17e69df","9eecc5df220ad47e1027204c98df2e70f1bf455f3d5242dbbf4139752fdada95","790da91f061b45ea06155db64b7c431821fafda0f8ceb53c351495c79db73c44","c0d8891d0c94e466efc2211946ba0954c9fdc6856b9a592085db0c10e04f4456","d5275056ce6f88da316f11fe9685aef122f5736bd87775c797a4f0f0bcc01f04","b28ac98e6d9875b80984a21c360b52842b5a3b4faf61f02d67bffbcffb412e77","ea18abb121143b3c16bef9bc5a13c470f569c0ce0991c92429fbf586994f4ec4","b949a5b1fe3c5409c484815b6b1e0675f1b11819a9236a5e546056d1971b9a8e","1d8f51436982e85b24ea8b1426a5f0ee7a81143ad75096c92a05493708dbae01"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2682933759 · entry 108e9186e8c5677ab48c…
Expected log hash: d15c976489915f93c119ef146e715f5c01d5064a289c9ac130af05811dc83d56 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788318759763","kind":"published-quote","locale":"en","page":"theme:sevdesk/returns/en","quote":"You only sign up for a monthly subscription, but you are deliberately led into a subscription trap.","rating":1,"review_date":"2026-08-07","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4fe8751e7d70…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.