Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nothing works after every change or update.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2631896876

Proof data

Record hash (SHA-256)

1f63f1a286582fc9e776404cfb803079148f00bdf7cae361c0ced45777a367c3

Signature (Ed25519, base64)

4w1wQrW50JzqCuv4npCMQwyIM18W60YXMAlhmT/PonMn+5m7g3a/JRz+yhFpNLlcbKqc4a063Qs8H0zaEWA4Cw==

Merkle root

4553ceda64e0f7e200f881e3be80f06ad7ad366bd41ae2637340e201b97fd992

Merkle path

["1f5b263dc50624186bce13984fb983ed1fb1a21614b96233139f61b9a361b07b","7d4e9bd38c5f3cf694a9c2cdf07a7a0c87a4bfa9d8e52cac04c6a8e7c8efedad","a319618f7455ed0937915e4266df59642f26765c0a8a1474bdeb7d8c9bc93f03","bc72a7b734c04b15a0a3691fc7ffeee1495ed21fbed152257274b8c8b3e89c00","d302eab425694d9e2a3578c99c288ca326bbc44c5bdf77fe0c1bf6b4fafa259a","a65c39d298d7dc602c8b6d096677a141387bfb64939d3ead3e7e16d23b83a1b1","b3d9651359acd01082e90a0da4ba993c0782b0bca92132144853c29bad685bfe","9074f31fa57464e456799780411eb8e93a704359f4a65bd8d5c8dade4defe16b","a49e0b2e55c118ac677e6c19b68643e4732bf5e61f5c0d170c3920660d7b70ce","7756dd82475e8ea421c1af23a65e8b102ca04f2d7216bfbb44fd585899110cf6","ef4ed6567c9210efff75e498012034383b160f0f770ce7206118a912485b162d","dc187ca4ccebaf9823665536af57888b92b979bd13cebe471031ab56c66186c7","1b9ac25bd72956239649fced74f841271bb5362800775be62c8a4c65a89114b4","198676edee22eb362b9f42be6e45e0c6688564326d7ac8c78c49d4b535692f55","a8f2b1eb226c55ba6a50b4f9e41f7daf82ed22f31e84ebf68e8ca69f1d094df7"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2631896876 · entry 108e9186e8c5677a5ea0…

Expected log hash

82d6416ccfaae92d072047c1941611dbdc6106e011bca285ba92fc51ad50f4c5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787970342088","kind":"published-quote","locale":"en","page":"theme:sunrise/durability/en","quote":"Nothing works after every change or update.","rating":1,"review_date":"2025-09-10","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4553ceda64e0…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.