Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“This app has never been right”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1bb6f720b1418885399a9564b15ec73f1e5e423d80f419a5f95d61fbe0b40767
Signature (Ed25519, base64)
hjIJyI9SAz5y/vVzJ4n6IqInq6CfLBfOIWMix/yDYAE0d69gWAbcUJbI9+u7/fhAEzlh0qMlVruKRHegJHKUCw==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["1bb37f2b3c5bfd145e282db39636131ea1ae692e44834602d24a8a68138e591e","9d0911a227956662e591017ccf4cbc18f325e37530747ca2ccb8eb9cd7ce648b","e9d2f990e163034f36aeb60617466ef47b090d9b13f140879da2c649cf79a34f","9f3c750d167aa6a244617680d244843b40b268486fc0d3db5d0efb9d750f5494","a12b7352cdd61423b04fd1c34da944e6aaeb483ca7b1dd6e45376b50563d14cb","fc1325ef07ee1bff44989491cdc134a78d3a8cb21e73aaa6678aea3d234e8498","217082552cf10ee1d68024cb9fff5b143fd3f8086a0f6210346d54ad40818698","46075a081a5d5d43d892e65091741cd448585028070809350028700906208d2c","ba07fd619fd3370f9ea3a82dfe1b60a2ddbff5737fb96bbddffaf3136772173a","2a8fa862966af974395d7fa5926c2ab2720a8c78f1b3e4663eaed13056e332b7","6d0d56bf35e92fc914622de507d820bade5cccd5e6abdf4ecbde1a2ae0fe9cbe","d2fcf30f71e978cfa8864728faa4ba390bcc591700ad83ceb71a9abba973d6c2","9428e24b047bb9d4ac05b5ab6de36e249e544865747a9fa357ea862bb3060151","c4a4d8b2a4d8c0bfbebb4916fd7e139c5aa71a08248affd318e33dfcfb90fbec","b39bfa02188a075f3ffabe31b61efbaa34ef7a32306f491e668efcd33d84ef4b"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"theme:accuweather/durability/en","quote":"This app has never been right","rating":1,"review_date":"2026-06-04","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a21e5254b79c69574b257d3","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.