Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“to be able to choose a different billing address from the delivery address”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
195376b0378e40b08af853fd125d96652e8428eddde7fbbcd95ecaa017668fa7
Signature (Ed25519, base64)
jcxMQNdwClJAqR71hp0lYSh2xEFOMgCUQOhNSHcPhKgUO54TKRhqrQ0uSqv+KwcCgtXC9tbk7h/UGrlkA/7aDg==
Merkle root
4e4bd1a263431190e24045d88fbbb7ed5f9030935faef80dec659ae2f039ec76
Merkle path
["1952d950e2f3571f664f9dcdad3040410cc65437f76cdf1bdff6b7b120307c6f","1c3f074e5db31f7df0ea142656c4d1f257566e1fcf60addc4af60747091ea7d0","22c0fe5eb6bf81499681db610b26375e62c30dad2e1b15fe71c828615012196b","b8e70dfe8cdb00a448407071939689f90b8d7f9615465a8a14cb493a3b13cfa1","08c4202517031958554244555ffa6c70fd612f2a0d0be632231407f51402c9b0","ed4eb2feb46ce6e0277a0e93fedb62fc0d816eb66b1d8601661f32059c538b28","cb788172a700b52bb42b814b3cdf23a7039206ffffa6167b211035c162251751","5ce4a0a77c68fad531a8b17520a1f99f0aae0719d2744532583f5af6426baf48","ea93d705b9b16ea8f8ef427d8cc4ee3beabfe60c752c03a1d91609d37c9f9e71","6e1fc91b351aa48df2e59f9efa12a292b7d43a669f2fd4886e77aea242b7a5dd","51db5ebbf7f763f2f017aadc8b2ee8bf3f117d37c52b29cc461f245f633b0907","30a2b34c2a5b6ae054f15f8569dfe276d7d6f29dbb6489fe7af676a44ee56e16","0dca924cc5d490cd09e6cf28d263a70ef1171963dfece74286d6f33a3bb659d3","5b404d681bffee559c59320e4c89c61c29c9a49c6b4ba6d76cd832716684aa58","9aec3ad04e3d8c78958d9259e35fb1f1ff0ef798a114433bf3a500e8a57b1e41"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657305914 · entry 108e9186e8c5677a8c0a…
Expected log hash
706e8c400fa8ee9f8b3984ef9db59f211ad2980d864551783fb16e1211d62156 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788144640122","kind":"published-quote","locale":"en","page":"theme:pixum/billing/en","quote":"to be able to choose a different billing address from the delivery address","rating":5,"review_date":"2025-12-11","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4e4bd1a26343…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.