Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I uninstalled right away like 3 minutes after”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
19758109389fa69b0b8648b46507aaa0d66d7bb83b0f70417ceed13e320199f9
Signature (Ed25519, base64)
Q1pScxzanMC6W6ADsY0WGHwvMFPgckVyT0f+qF2dGh9pvLZHFq/zggO2GhPBV48FbDI1kK5Sr84iwyYcRxo4Cw==
Merkle root
1154a265a990612db5567445e00872656e7ced32aff0b18660887a40a375699b
Merkle path
["19718ed0683ee5806e46b0e5ea5f504179959cdb9a75cb59cb774e8907f29fad","169249e9aa87a343991072efda5fdba4ed8527be409af035df1bd1ab19938c98","0fbda337dbd478c0424d433aebdd4380331b75f51581d83c9ff2f09d02fc783e","203b95afce48f5aa2fbad6c2ba57e68ccb41e50548819695d00b897963e36ec3","15ffe0a410ec1d94d62ab8e937523bc355917e1e6763a4360d49525e986aa80d","99ab77cdc2a7f007ddc04d9d3405d53a4b014a412e5ea3e60212c198844bd3bf","1d9495f7179511bf883b974359ecf5a46887dcbca9a0ab7ee9e9d956e973404e","2576857540738fc2240da0641e0aae5e76835aa4726f9ae8690b82ac0ac8359b","80a515499a4820b7ca079eb462411f49ae6cc44a1f32b85955c604d1c19c6142","19dcdcd6fdaaf754a091a265eeead965dffc47c335f4ba958b16cc7d798a9318","620e917788dc113ef45dcd4698a0558e18cfc00526273a33cd6cf5611152fef1","54470c95db60b455a0c78dac5274c8fddcfd14dbf8b437c021e65444ccbba766","b97b31ff0f5f1927f705ed5cc4058e8c41a5e50b6df206554bce52cd3e74c24c","6b47d1533765a8fe766882eb411a4cf6ead3b0e29c680883d52a550ee72264e8","8f93c563d7c563da751df1a0efbe13b6ce9bd7032eb6dd0a995c545aff2f5a1d"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524110285 · entry 108e9186e8c5677a87bd…
Expected log hash
34efb4ec1aab60168b83ec62d0334b8e10d9814c0de0cc0d3569d176ff20bc2d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787152786156","kind":"published-quote","locale":"en","page":"theme:acrobat/returns/en","quote":"I uninstalled right away like 3 minutes after","rating":1,"review_date":"2026-06-13","source":"Apple App Store","source_url":"https://apps.apple.com/cl/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1154a265a990…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.