Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“I feel very sad that I can’t access older emails.”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 3668087860
Proof data
- Record hash (SHA-256)
2106184f646d792d28613707d2bdfd1e74639706ac09085d9921ebed72f2b0d2- Signature (Ed25519, base64)
E5E6dYrRzVNsIRYEBFXDmJGJMfDQry6Zgp8XrAW0lB/IjgJx2g0RWZj1M/e4PR7KVDEgoASRXl6fm41YF0LrBw==- Merkle root
1047936f87a157b28c078afc7a20c2628bbc08f0196f675d74b106da179f0837- Merkle path
["210bafcf7efd842e581556613676c4208ef0e0a303ff0df8f4b3ab4f592e5efa","9835f88e9cdb1800be4969dc44d0fba45fa68b127b502f85afced7ce0af891f2","d2f8fd0d81dc63dbe0f2e3e4b6bd9a8f7bed0fc876db572ed191d4bd5a863e9c","0843ad148c90c9f11baf730c78bb6eb9243cd446f7c0d1553fa5243c5ce83f97","29e3031dd6a13cc1c731e2694a74a61e4a6688a730f3eba8fd6cc066b1500d86","e6b084271a7ad3875dcf2387084b9d365058ed4532af849028fe26e8208675e3","2ee49977f18df48e88d3f38742e4dd48491bfbf5060e6abf813060d0ea57e869","b19556d1fefe24cd20781a2a67ff8da1d26b9caafbc30e47afa9ad452c71ffc8","6a2f2bbfebed29f4e6402c5db4bfc69e1538c513d4e2e6694c5d496ec933bdf9","7b9b45c4d8838e69f760b1daac1f07eb51b240a007f07b4ebe96adaf0de5d183","8a62d67b1eac3a93a3f8a9acb42dd8c8052a730015b4535c97ce76cb176e6956","914ef6f739bd41530e41057618e80b0e08808ba78cdd769f11515bb20e10b1b3","f0c9f05f81092a04253915106712474a19d91611bbbc8087119ec734570aca0d"]- Anchored
- 2026-11-03
- Public log entry
-
search.sigstore.dev, log index 3668087860 · entry
108e9186e8c5677a9a52… - Expected log hash
-
8136c8219f7f6eb1e1368a1be1e1dded601bc632f0bfe79c4ca1bc6cf8be67a1The log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1793705308993","kind":"published-quote","locale":"en","page":"brand:tuta","quote":"I feel very sad that I can’t access older emails.","rating":1,"review_date":"2026-09-05","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id922429609?see-all=reviews","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1047936f87a1…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.