Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Deleted app and all my hard work is gone!”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2671265667

Proof data

Record hash (SHA-256)

1906eeb72937d39ecc0be2bb415567cfc2440b73442eea1f7a5588f48eef7d59

Signature (Ed25519, base64)

la+zLEX2kFipTPTXZtkfnAU5inMvD1t5jLJ4d0T53MfyfhrNUuZPjYsH67cPvE/11LARq9XRSNF54FX73bJWAQ==

Merkle root

4814209eff208716b4535c2b0fd0b03895bdf3189545e82450cb75591e4887da

Merkle path

["1906fd51e98ec79f2a813ca451095ee5005d02ca61e13e72e121b1be6a7f34d4","9b236542d83ca656378f3f1e2feea63703f4e91fc060560775002c158e0507f9","53b077d0f6e3ea48ceb59ab8658d2a986af565ca32319553af1e0ecdcf24d934","6849c40c164cdf1e7103ff026b618836bdb4cbc0b67fb1e8588dc62f353b540b","f46e9f887134c33d7d68469d5b68001837dbbc4dbb41cd62aca82e90d11fe615","21ed6509e49616572c0bc7f97f95328469b62e134996f3749de1a604626a25c5","3e19ef188e6534d92d478edd4ca48fd984876c34dfc28330c258c1a6ca42578c","38f439ecac3137291bb384633de7ba6ae1bd0e7ac1f375d9375d7d78d309ad16","b799184b4e3da60174c9423772d020ce35dc3ebd40bafb5c15acbe169070c1be","d7cba57604064fb98bc8512c26732e41f3b715ed4d917760fa857380527ae194","1df2d62ddda80b02abe7e991b35ce4712b0e7ca4444f537eebbe59b1966f6274","8cf90eed3375d3679a924a8a2b362d791ba8c7de2de6786e84fbef8b43792a85","5ca41ffa95430097818b993a1ba310362a9e5fa81d44bfdc04fd6a5a86897658","4222d4cb0e3cb98443733ef8f53c14d869249278d4ea410003cf03e3a343c09c","12d9d8014c44524a8d93c0e0f1440a3071b98d9de55311024d7d505c5879a63c"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2671265667 · entry 108e9186e8c5677af0ff…

Expected log hash

0d4aa038b3cd3d7cc8a3744c8157ddb93929116887b29b6be030d34102a7e419 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788234112368","kind":"published-quote","locale":"en","page":"theme:acrobat/durability/en","quote":"Deleted app and all my hard work is gone!","rating":1,"review_date":"2025-08-27","source":"Apple App Store","source_url":"https://apps.apple.com/sg/app/id469337564?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4814209eff20…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.