Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Support is unfriendly and ignores follow-up questions after invoices are finalized.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
19f4d8e277ef4ecfdb4f9c63b7ace10030e5cdc9ce64e439084093d4c4946f8f
Signature (Ed25519, base64)
0WILZij/0pUbIilc5c1Z/dG/LgLFAmYPRpyKDKSY8eZtCJnwlFmlE2qTOS9sGafZQ9jJwz+MXKg4p93DasTWAA==
Merkle root
62493148956a8c17abd53a8c9ed797b64e65ad5bb98d36b7aa8d51c339fff025
Merkle path
["19e8fc39e8c51a9354ba19bc9cc6c655c6ad912dfaaeb6775a82d184f56cad46","d2b505a3a0bc0e914c6d363a045f356b61ca54234e475a6cb750c2f7272d7664","da82deb7f6009b176c64472a427b90a821c2f81d49faf18f4889724f55b7db72","8ddd4797b7df98c82489bb743462865eadf9f15ed54a4d8ebb3f6ef9a5ac9a12","09a7a606372b5a38ee5b5093478079e16cbff12ae3b229d433b2586df24eaa97","5e612bf9e17b4434b6441b965203106ef6342547f2f15fde1d4c794fe98de04e","16ec6859f12b8a086da76d1f61cbd52b25855ad4313e95a4ff1534d6b232f468","c9c1ba32427eb20bfff83f0a397d5f2e4f41436368b5e4dd474775c8cfe5477a","f462eca0c50a20771a2a687a1bcd064b8b7aaee9039eb02cb6f7f073fc9e38e3","ddf9ec4987f74be486a6c68080cd20c406c0f6a4d2ada633228cd20d366947a9","a64aecc0263d9033181b8a5612cdb7bc46448491b6b14f95043e5eff612c069c","e7fa46cb3ef21222f7ba39eb46379ce6d573ecbdac2d09bb64f0d29e36d0cc1e","0d5bfb2982eb496ec91088407bc450b593806e0482bfe81826869f4aeb42c62b","8c6d2c7076ac2ee0b8e592fee4b535c629bf4ba08a80f3d9ff8794fd682b8ca0","81ca6ab71bdfc38d6690336508e82bd1e82f9a656f0fefa771d1028af8c796ba"]
Anchored
2026-08-27
Public log entry
search.sigstore.dev, log index 2612065734 · entry 108e9186e8c5677a3494…
Expected log hash
f8318c40dc89e43be6c4faea0c023b4821c7ae9aeb6f05e59b451eef93c53bdf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787797679240","kind":"published-quote","locale":"en","page":"theme:sevdesk/returns/en","quote":"Support is unfriendly and ignores follow-up questions after invoices are finalized.","rating":1,"review_date":"2025-07-20","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (62493148956a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.