Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Reliable, easy, flexible, transparent, extremely competitive”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2621349433

Proof data

Record hash (SHA-256)

1e9e3de3846b17d60a8e1322ec728c698ce4d42281b8fdc156c627f09f63502c

Signature (Ed25519, base64)

+huttsoftqqpzz9R1cyLWxN4gzcBrBbG13sD5fDFUtVaZnHK75u419+Ft1/7X9wK1D5GX+vfnR4DEG+mS7f1Aw==

Merkle root

52b348c94f3fdce59db013e2d8b151833bfb9c02163bc60ea07ad4321b96c806

Merkle path

["1ea0fbf9b3ae1985e3050e0a80d33c992fc935936aa8ae3de3b4354c3bcd1fd3","eef8254975b3ee91c6d326b11e1fc35177748a86b15b96283d1b91eb153cfb33","8afa43b6344912aa2303da3288779e662fe2d8b23502d2a50b7232396500ae3f","71b256578bed839333d7b5ec094b2e127b69a1cd18ab3298cc7d979e0b29a723","47b8026bc154c59f309a7c8b181f51eccb247fa8b3887828409f6e17472c1804","b118a407f4540da74e97fa3428c6c33b3436881fee927718d3eb72955bbd3f54","c9a5173c0c1aad3223a559afd5cc54cadd7a29b348b318b9656a1ae8c0e32a0f","b558aa53335c3d439ec3efdc4f8260b2b3b93bac9d69d38025c90f8647425639","b4b005cde34c7ff8c369e75ec1527403bb13ecd81c91f85b791e9eb4d9e8e260","1a18ca9e1967a6dc51e2a3d0fa41aeca1be17fb9365ec35bfd85a0b230d959ee","53d656107a78dc7a9a7dc366aa4560a8a50abe6675e3c43af0bd56439c56e649","99eab656dedba76332b8b09868440641413fdff6c79f07674d731ea51d5242ec","737cac4ca199ff9d501e9278c7c4cae2cea135754fbc58a1df4019ac06ac48eb","775de910b40798d9f37b75d39be79e50770b797482dba1aef04bba70619fff3f","50b301601f25f58ca39a522d1fc14c87ef92ff2847a542557119e06fa2bbb889"]

Anchored

2026-08-28

Public log entry

search.sigstore.dev, log index 2621349433 · entry 108e9186e8c5677a91b8…

Expected log hash

c0c478568c16caefc62b4dd151387aace853e1d48501c09aaebf0c1fbe3c7cab The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787884935070","kind":"published-quote","locale":"en","page":"theme:findependent/quality/en","quote":"Reliable, easy, flexible, transparent, extremely competitive","rating":5,"review_date":"2026-02-04","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1510962836?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52b348c94f3f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.