Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“nice return policy”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
19a27d1f1e8f2f0d035120547b560e30827555514ff3131901c5eeffb4da6f43
Signature (Ed25519, base64)
FXzjBBA1qb8FvyoGmMA+xfOP4MHgArrdvj4u8GvyZIrhq0zM6rBGhHA8uHI284czP+TruMicdifE8l25Ju2LDg==
Merkle root
c768716b2cb21aabc39de506951f775443418285e2c5eda072e3b3c2d945945c
Merkle path
["19a9deba1646cdfb60444304895271c820b2995fcfc31280999125104b02039f","76e91d7755bc8f5c7774c01e75213e1ab00cc59f2369f41b1cc9fd6b2d794075","ab64285acbb7427eb10af5c2bc67389035fdc4bf03d9919914b527c1756914c3","10f5fa96f31d413bfb26d3db81395c6760822daf191542252f0e6b1bb03292d7","984fbd3012f22e8c58981bc32b2b2ea4820c9b64ec75261ab242519951ec5843","dca7e6fe2b0f8e0c4caa98e0aa44865ae4a00a9f5fc68626f288e966edde949a","d2613b523b5ac979ef71122498101150c3850d6dc727113f59ea30a40ffe9c81","977f3af77f696081c217295d1ff64e087a5303fe608d6fd2838201d35bf7ca84","5b68820a8a66215f253f62327683ec5e59b59b7cf43ef02522aec9c2a4c64512","c2ab37a567fd904c02c419e46f19d2f70e975819b637ac58ac2f8ae690a9c708","e78d5744cf872b19280090bfd39b1eba63c9898883268666185609ce5523ead3","920ed087a52e89a6ebb47019358ad236ea430da1db7ef2620e25ff0c3fdc3b6b","38e74f19a86a1311a4dbfb6ff75312ce32e1ae47f608a45fe54b6162c0fae8f4","58ccafd37278be2b9508db439c14e85a319c2716b397eaff7c959a5020ac606e","4c61c84fffc3f3248d19b221d821cc3f0e04d1cfb4151bcd103cb5959dfdd5ed"]
Anchored
2026-08-24
Public log entry
search.sigstore.dev, log index 2579644936 · entry 108e9186e8c5677aee79…
Expected log hash
3a9c8e6bb3b2990f2171448c5468a63b9d6f8bed98ee1b72cd7d6f73b4663243 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787545182186","kind":"published-quote","locale":"de","page":"theme:audible/returns/de","quote":"nice return policy","rating":5,"review_date":"2026-07-28","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id379693831?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c768716b2cb2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.