Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the customer service is super helpful”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1faa77d4490a11ff2da65390a9121d142ffe7e0edefa0e5a43689f45bccd60d8
Signature (Ed25519, base64)
Mkh3r+2E9LwI+l+WlhzWTFG6MxlSAg4dFAhBwiOzzyN1hGwAdR6UCtJCimfHNJdcN74g35oXvmwU19JNWPb8AA==
Merkle root
30e6dec0d0882018a3e7bccf18a3222b7daad8045915eee7523618b7cf75b77e
Merkle path
["1fa4c2969f630113eac7fce91ec87aa03e55d34898f5bce861c816d55a4abe6c","36310678c86729301b73382a2c2fcb7c102c36e1c910f7eea7aac26fdacffbfc","d41973446efb3ab6e690ff9e05c80aa4a298e6473b1051b5facb74f10d05f8e8","45fbcca55d616917282eff41f6e0c962893a6bfc53826ee1405a2342fef387b4","da6fb46a229d5dec96efdeb0c335af4fec9947b49654b8a4b8c625ebae8d9cea","3de2e412252f4037041d08cf40b539545b67dcd5eeac9ab3ac313a2aa54569fb","4e168c51e0c00cdf15c2a826b16cf897a789eeb959834570b40ff809205aaca2","38721ff0b1c9b418f5134539383842f5ba48fa66d70a2d8b290bc02e7bd33cd1","cdaacf46c94de2e94c6e58ceb4ac98d44128823ac22e9849d2861f6c6392ed12","3d191f21ab8b9e7f90715c2680939d71beb668b05a25630dd72c39ef5c8e27e8","bb85f7327dc93da3628816645dd95313fd0887287fcbc77b457d40e29c34a871","912fcc514d19cd9cbe0a1b4ab754d197504acd67486645ee4aa172fb248dca00","46692bc80fe953f4d8d52179b535334176c04357301aae92a75d811dbddb72b7"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3665856061 · entry 108e9186e8c5677a72e2…
Expected log hash
ffc1bb1abaed68d6145f4de3e9055a9ceb42d7f5a099d941c361cb153635fb0e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793699634728","kind":"published-quote","locale":"en","page":"brand:tuta","quote":"the customer service is super helpful","rating":5,"review_date":"2026-10-07","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id922429609?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (30e6dec0d088…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.