Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Unfortunately, I can't log into the app”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
22cd18486b5d3fa6ffc750d46f64db8b61e7aa4cab239d3ef3e2ce1f6eca4569
Signature (Ed25519, base64)
dgZ74+6mtLX5ufAbZttYkwTzj9MCJmEBV2CthRP7DMqBTUtAJ02/oXmo8xPn5w3OBxCR9/wTCbxjEncBdglSBw==
Merkle root
1f4f3b5edaf264bc6a00193653378e6f11cdf7d052ca5b778d915c1c21c7403d
Merkle path
["22cc2aa06ed556ce3813920ff979ac52fdf6d3e3a4b5ae5bda7323d5f015d496","3a5b4eeee67dea5e4ba856a43bfe663ae57bbd8ff390d50e176790814604f34f","debcf4aab8cf408f7d3a3e940bc4be692cfb1a576a826906a24ff79a654d4435","191e2bfc2c8d237e1506c593e8b2922e2309668ba17bb7d6f1f32db1c5628b19","0a4a6ec25ef1ff388f4e07a886b7526242073296c757277c6a000f30e3fab02a","59211401d2aec771ace20fd9fa1b34e8f5b6092b7adfe7a6fe9aef7dac17d27a","bc4def0d1ed8e278353e2bc24ca2cdc3b35ae327e1e0b00de1952162ad036af0","3d39459159c4584760940ccac3465a1aea4e2c18526973cd176f2ef8f94d439c","2a3b7231279cd529ce35bb1b94b35af05025604c9da2e9fae37349380cbf1b48","3365bbb7e433ab9e2b7f1e3697fbc9b299f6bc82c54982a790d711fe33c4a04f","891fb29c863753ebb506517206909b3293072cf4cf2b1578ea09001344c4b995","9c1a01ab9d5389c233c6458f624597079f3a843c097a6c647faa4d808a85ee0f","138cc39aec794b5e40407de02fbf6256e5c6e88e3b28ce0749290b058b1d725a","20b25fdd62f3ca5757c7b65a8879088679733fed5432f6a9c311d3d03b993093","354ad39e35fba32f932ca084b3a174e4cb81b7aabf68001f138a9a4088e307bc"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514750008 · entry 108e9186e8c5677a7ac2…
Expected log hash
72d3f466bc589a4186e04430bc1133fbed10c2c1049384c2fe15c1cad3406981 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787133679631","kind":"published-quote","locale":"en","page":"theme:sevdesk/ordering/en","quote":"Unfortunately, I can't log into the app","rating":1,"review_date":"2026-05-07","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1f4f3b5edaf2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.