Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I paid 570 CHF for a new phone, but it never arrived.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1b28a0613d3829f582610b0e3f38e33bd0c3ea4f3714eb7c5d03d27e1b9118db
Signature (Ed25519, base64)
MOEYjiCNbsB2AZirwGd+O5mEqtprLUp6TfICeBdbviU9rpPtGBTqpbrpAFcMvfAEy/F1HvOWUiljR90xfwd1BA==
Merkle root
2915d94fc718eb48f67362a65d9a83b80dcd4c926c786eb2e38f4d8ced0439b7
Merkle path
["1b25e92d9715658dadb88ef5b6ddeaf26156dbfb774f65b3460af504db6a2e96","a7a8cf6fa3bd64825ced6d68c65d72bcaa7e992abb7f819285b9eb2a4a8703bf","6aeef6ccb28469a28f38274dd84bd078ab31d0ee7ae47641001e74fd5abfecfe","6a8cb646f905f3ba83c4b0afd1de9427df97c42b5766888fa687331738a39178","b10a59aacc5c45277d2d05eb3b55927e3227ef1508854efd0a09d57b4edcfbcf","f1cdffa3e43553627f0555cac4a36823c6bc2fca365ce9c15f05b6eebd28d0cc","4b57bb4daf2920fcd306ee60f01147590eb7c04dfa2de5499cd00bf5139780ec","3f7143aa342fd3f620f77fb9d3d6f4261889a03af302fa6fa2b32dafd701c846","2797ea3e5cd2f445d5ae5576274a878b5973f395e5f87ce4fc49450625920adf","764f23336b7e371d6c6eca74fb57155d101c397f032dff6a83fb6c93662e34af","eaefdc9d2153cb57774a542bf4960da4b3943e04088e3e5324afc336dba0d757","1ae3280206ab1fea5c578b024927fda3a1893a5a0f8d253d79243408966b0d5b","dbdc65b9f91ecf7a21686f427f84950f149ff3313cf7cdbaf938355c0225fc98","5b8a2081ec81ef2101256bd7209457c75dcc1be14257b40200d45a88003c0c32","1936eb7713ae59e20354a37b8314d3745433b23d047da205242414a6fea32b67"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657230937 · entry 108e9186e8c5677a80c3…
Expected log hash
1d9aec1bd239e45b6e622f366eaab4292482e627111ddcfb4c651bb1e08e92ad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788143889053","kind":"published-quote","locale":"en","page":"theme:sunrise/delivery/en","quote":"I paid 570 CHF for a new phone, but it never arrived.","rating":1,"review_date":"2026-07-10","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2915d94fc718…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.