Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app doesn't run well.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1f100b1c2773a585d7563404004b8112740bb8ddbb64f4c62435ae1fd1a9e9e3
Signature (Ed25519, base64)
eEaUN3DmGO9NFDUZwG9igeq5w6HXRPLov6s4zL15Lwgw633LV5vSFG0hbi9HW00r3FDaX8/I78SOr3VuYZaZDw==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["1f16aec2fa8f2d3f1d659ed81bcf17ef754721021ca6cf7cb20bb6af556069f2","844a98b7a784a15903d195fb84ba619e953fadb1bc31dc284086cf73dd7a1aa0","770523e0e4b42a7f19ee79ba83b076176ccb44b4e6b8337144e55eec9e6dda9a","03e13949c7c49093e963c3c0b01e9c3461c7367c9f2bd6071be45ed73edc62a8","7d94f28f60fa23d1f179f9e56e294f192b85ed8d804bc2d21604e4c0712e481a","025d419b0c16ccf2338907ccacaf2a0d9d633524f2bdaf62f5f600dc81d6fe58","d4d749e17e7acacde75b9a10768976992842ecb235df1b614d2d6ba3a57cfc83","813f880f38e9a5bff65c47de487d360f59d6e0af7bff5c4353bf7c78b94c2768","dd1278648637ca8800ae7317f1a5440cfd65b3c4c478d95ac0900ad7bc157f0d","819c95160839a054de3fbafe70923b890a4c435d88a3fecbd223120279f6842f","67d9484b75402cad6659f9dbbd1623f614dcd95f06b4433661e4075fc388fc9f","9f6fe8b8ba9f3011c0e6aa1e8b55f973467b9c20f251bdedad5d16d3227cbd49","a1c11df65738ffb18228c247fd6ad5fc76428a9130a0079c6abf079e9cdfe043","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"theme:relai/quality/en","quote":"The app doesn't run well.","rating":3,"review_date":"2026-03-15","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.