Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nothing shown in the App Store works in the app.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1c89e1774e20c73993b66cdbbe7b60725e6d618bbc500cc88c0d93c6bce2d302
Signature (Ed25519, base64)
GlJPs7ZSIs7N/gOQUnQxJ8oT3TolKQJfNaruy5CKL9Zuo6f5KFg3Rzx3Fn2NVvCjB4D1ak2K5nEyOBbMmenYCA==
Merkle root
6ddadcc7cc1bb0679f63a30d8a28a2a72e039950945f2d7276487dd5b703ff7b
Merkle path
["1c91fcd6e759d9bff424a9966b5e069d58ec85e798f70d3823049fa768c2c2a3","8ddd7bdf155f6d3f3bac905be5c5fd00ed9bcf2602f12c45af9d9972cd4b89eb","46ec21c7fccabde37540ee60b7e2cf37bc1163d5d8fea899fb86c0d59c18596e","a12adb42de034047d3dd21d3ea0cfc8a0dc0951ff49ab08087ce1f96d6f0a97d","2ce4fc88ac0514e15d03b022a32fa1b32ee7d9bdff075af66593380438be410a","bfe13e7d518dd7760ef5e96daa059b66547c91234919a4930b4f2775d8e7d17e","49ef09a8e8a6e84c0c95b603ac5cff6a349d7f170c11cae1714bc558adbc6310","dc4b17cbcc1d30819edd82e2adb04db72052e147023926607d936d8420c2e931","5989af2b9f7f71b0218f481ff58527182170d8d508f8b8747a7ca92cf4f3c215","3074b18c832515bc8d93c68fa4ea1a251397912d7540f042ac24c485b4ed2c77","7e4412307627459b333ef90c4076fca2cfbd3a6e9493c213758586641a465ae9","13fded2c1e81ea7255dfe70ad4bf96cc8520a6f29071b3a4ec55f86c4459dbf3","adc0c6eb29d14048590505808b7289699c5b9115e3705ceb6c036661ccbeaf5e","9e168dca44eb94549433cdf178f0f0b1ef27534c6f92f24d9664ece03a3c710e","052ac7d24dfc9659210f2718e5c7e6b2477f3dc364546bd6ed2bd5df9d14d7b0"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514541190 · entry 108e9186e8c5677acb65…
Expected log hash
adca5adcd6d3235cf084bc9b408d3e4d7742d07347957346ff2629f37429bf20 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787130614827","kind":"published-quote","locale":"en","page":"theme:sevdesk/quality/en","quote":"Nothing shown in the App Store works in the app.","rating":1,"review_date":"2026-07-01","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ddadcc7cc1b…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.