Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“simply charge AI that I have not subscribed to”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1b828c296b3ff0e8b9f0d49e31a3d25e8dc17d42575e1a80073248994dda457a
Signature (Ed25519, base64)
aBTDsiZr2MW+l8U9/Em0Fix6L5R/+P3Elr17jBq/RBxZcNEeXJd+a86MPEImPv9BukjLsA89o/HqprTJRaorDg==
Merkle root
d46cb1ae251ab4eb9927c9aa49346d5122e0972e95f3de0bc747783e39627b20
Merkle path
["1b836f63d0b5d1d3f83ec0f270838f0fb353a99485bd8c44c23571d1def76e13","d9a582da8d4b4a18a6b29ff7ef4bc2c6f41a86ca4dedaec5f151db52727cc2b6","ffa79a1e772911dcd0585dcf7253a67e75efd37c8763aea9e74d078e0efd68cc","1cee40c5b846de0701f0fcf96fb428ba291d316723056f328952fb0b8facc7b7","dd0c5c559e83c4755595e34e9933730cf011438f6a8831f426dd5c252925bd5b","4abd06f63bc619abb1e9be2a65e6e8ea879feb32c6155450448345998e921ba6","52b7838baaeff9bf3222dc6886e9584dc9746e34a1c305dcad6a3ec053fcf4bb","afd520ef3afcfce0cceeba6f71f120a7b9ac9a27ae135fff0cf9ac54d4cc5586","299c8e6165a8ff575fe7bf3a3c024fe3d024132e9ab634c7f81a89f94ff1bff4","bcb9d555a85cd82b08473b0dbe499767d2776ecd11e0a2723990f0bd749ce015","f5959f0c5c662da711f032337267d4044e96c2674913163d169c732c23510e41","a4f20f70775c3e895084c987b4fa7babb3808fd3147392cdc65e82a4ef75f339","4a14f55edcdf62d56fb3b41ef84c414b51d0eb41f374564376b157da5491ebe7","68887c94a8ff3f8133d2482ef2c9bbf8604123a7794f1bb2158536146de3ab6d","0833ef6f4a75733be647d99ef9b7298f3428688ff5df279f6c54939387fc0497"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647203528 · entry 108e9186e8c5677a5a9d…
Expected log hash
7105e6eba7c1fbef8f8eeceb10ea9f96e5a1584032fbe98d2da1a28ce036bdd9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788034732495","kind":"published-quote","locale":"de","page":"theme:acrobat/billing/de","quote":"simply charge AI that I have not subscribed to","rating":1,"review_date":"2026-04-22","source":"Apple App Store","source_url":"https://apps.apple.com/sg/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d46cb1ae251a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.