Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“when you initially set up account you are restricted for 48-72 hours?”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 3637396099
Proof data
- Record hash (SHA-256)
1e798dc8169b12b4689cc0e4e92b475344c41611c6caa7e457858281306c9428- Signature (Ed25519, base64)
F1CH9tcuBI6H3kBCtxDRxJ1og9Ygn+lPBQ7Ocfwrh69JHeINW+Jwrj8L4FQx8fvASWYcYHrPdgOVd/rPGZW+Cw==- Merkle root
8f2c2f05f88c969dd850965729c24c32c52cc6403a26008c0bd53784ae27507c- Merkle path
["1e72d01dc1f19b9c3298fca35f6681347c177e60be49f5b9ea8caf05bbe1d626","33dd278a55ab6dde9e25028f0275109aac39ad16c8ad4b25faa7e26cd9cef235","27e0e870932d4dcf29d0fee8dee6caddb7c0960cdd0b70da3f1e59fb8d6dd0aa","d68393eaaf09cb688389e47f1b2cadaca6f12b3641da3437f0a0ffcdc57051cc","7c6b8fe412e07e7f322467db5932782917883c1795818eda3c085c01e84701f3","c92b894981dec326b4218b832c0ea76a0e4b8254ea1479c8704267d482b9d119","96f555130d34bb3cdde9c35881f9e40bf0ee052a217aea221c094267bc48edaa","60bdce96c5b92f48e18327b76e1cd2c4b75197b938e024607b66b6fe5a1b293e","9165f7abe3fe8aff7cda0aa8063dd4f6f7b2d873e94450fc1acd30f76dbc8d58","cbd52e29019723649e9aa1583f0c1d27a94d55b60e1bfe5adb7b0bea7fd0abb3","221fbf3ab0bf2a49eeb71bccd46c26156ece3b201beac03021cec98fda89461a","a4032a234c9f4713654e6a84ab5dbda9df3bf27d86ebb8ee6e761e0263dc017e","1cc438269a1190f75ec95ac8b661278f7f1bcbf699a11b5ba685e615e03039c4"]- Anchored
- 2026-11-02
- Public log entry
-
search.sigstore.dev, log index 3637396099 · entry
108e9186e8c5677a241a… - Expected log hash
-
e2625e03ca8112d902567b372759b1b1cfdf1591befeb5c03dac093cdf478b4aThe log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1793587598614","kind":"published-quote","locale":"en","page":"brand:tuta","quote":"when you initially set up account you are restricted for 48-72 hours?","rating":5,"review_date":"2026-05-26","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id922429609?see-all=reviews","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8f2c2f05f88c…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.