Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I have been using the app for over four years.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1d27342e14207f9fb2f0a8dba30c4704f55ed853a2b86a9f0bc3a3d97fa96a30
Signature (Ed25519, base64)
XPGczWg8jXgwYpBs59B7KyswO2qy6uw6dyg5CvV4LNFiAgfbDkPQaCOFbzXJMcdT50/9ca7fjnTficDRN0wbCQ==
Merkle root
e1d85175eb3de20460be7478d6cbaae36a1b9ffb3bb4959306f8da40e58cdc53
Merkle path
["1d2474d00fa5753c3606b6bbc7636a795ed61f981de714977845ebf47b43981d","cb1ff87968200ce78024bc3390819a3edd4ae7d5d4fdc879af166198d561dd70","bbb8300df15b46dbe21ecf742c92294a16f9890c0b0b96d4a798b48bbdeea106","1fd05f8896d3ff9d2ec37ef303f614da57c4533933848e07906542b8d07ac509","85be36acd214fb5ae3037771e304147ca1df630b33c1a687ec2fff801c1ff427","1d90c276f95b188967d7984e9827371d5cbfa020719be789d742208ab352695b","6a99bb06e68dde0233f31a431fb0d0821f3d5e2218436b05afaa27d40f936dbd","28adb8fd86fb5ccd9e438e8a7e80838aaf0d56ec1d7ed4a53c2a91e70ba05b45","c5a70d7a338a8c6e753505bd5a89d4ecaed8093fe116d070d0562dc3cde02530","264571099d949fffaa60e7ecdc372500b180ed895f448ab0537a82469481e607","e894afc0738575e902c5bf70dcb8fa4b76fa4a261a42994c0ad4008dd20b91bf","1c6a3024bbf3edf7cf0e0b6cfeb1bbce65c60f6fb15794c10e46a531bdd14c4d","9ca72d0c4bcd0994b86773e4ba6c3b971bc9ef769c49c764975054df4ee33b9d","d2259499a6a15953fa73bcc6db9325f819dce8e785b0f957fb07e2831cb6c331","696d05a8fe8f7b7737f5171e0d56574eb9fcc6fbb6486fca2bc89866a85768bb"]
Anchored
2026-08-27
Public log entry
search.sigstore.dev, log index 2612470999 · entry 108e9186e8c5677a32d0…
Expected log hash
320f5e8c7b6a05058b811d24c7cc7229f73f49082335118037aee793eecb309d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787800750172","kind":"published-quote","locale":"en","page":"theme:findependent/quality/en","quote":"I have been using the app for over four years.","rating":5,"review_date":"2026-04-05","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1510962836?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e1d85175eb3d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.