Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's buggy on iPad.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
18bc0e5bcd066164aafee41e9a9b137ef2fad799099789b1b82a0c2c02f83a16
Signature (Ed25519, base64)
13qpLQ0/hzBh8bi3kFotXYvyOEi65pOvVvlXLPa2giJyRNW3aep1n8VFYZ6h86MABcRlfeNlrMwfaKGS2BRQCw==
Merkle root
17ead47648ad229fc265a299c31080897702755719af6ea46a92bd0f863a72f5
Merkle path
["18b9a379fa4fa40eb3636b5b86798610eeb1cc70333c2a9d3f5d6eb9f47affbd","1f1fdd049b9a3181f60f0f162cd8b8418daae436c6fd0217f13bc8c2d4b94953","e16c10fab56fe04b2770df9c67716eacd61d25162b9c70598a4cddc55a81ea12","8cce8ec100c7cd7f115ae0ff34bd419f7720b295b881cee2dce117a523b45bd8","b7a47e70e6b8e1eff6dc2d55a6ccddf8c4eb33bfc3ff8663208b5a9cd3d948cb","d5803ece0d30fc330243785b7dcca1d3a41a179c00587317f181cacbac13f75a","18ed669fbca983a3eaa95c4181a34d37b48823a89cd863488fe933eb7e3f55c7","50a28f45e6e567c5eababd4357ba716c8a100a27e80eb184c3d82189ca72a4d3","d40884a71522f98383b6cc1fc475c04ce24b6a782ecc5df1e60da74bc1ef9252","106ee0bff7435ac7499e08bfe77cbedba1b897064f2d34fce2815d637375968e","512eb1c7891acbeab13677045bea3fe0e4f71bdf63b7ffc803c00052f5e43aed","1cf59c983850e9ee5fd3d8daad0a014a5e2bd7bfd0c3362ddff5f9f819d1aa5a","336a8907cbcc3bea9194d40dd39c23663d5179127ea696df24cb3fdc58724658","61f86e7e32fb75a7c0d054f2c3716920afb9a96763fa26840e5df9515d9f0dbb","60dd9429d44a63e544ca9f093ed5983c0d1f3e76b5c5c255137e28b3e5a7042e"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582676349 · entry 108e9186e8c5677a0952…
Expected log hash
698b150c88f0ec819e6f02a719a6b4a58821d2cb801810f732495f2566d7069b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787631090886","kind":"published-quote","locale":"en","page":"product:infomaniak/site-creator/en","quote":"It's buggy on iPad.","rating":2,"review_date":"2025-10-03","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1622596573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (17ead47648ad…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.