Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“after finally transferring the money to my bank account, I was left with only £14.1”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2358b8da9f2faf34c0707ae801cf72c3c98dba87c7fe2d88f8493fd5bd828ee4
Signature (Ed25519, base64)
0fEMRJR4SJiC4yvRLE5TzS8sx6T5+vqTcI1haLrWXsJa/Lb42IMa8eDyGbk80joz6ZRu4bX8Xuf4gZoivweyAw==
Merkle root
3b3dd30c58213ddb8f8368232793fe0b07c54689d13df1c0c41d21cb861abb8a
Merkle path
["235987d8ce66389c1787e94784a52a5df7300e5b89e5f06a1b218969d9a5dae1","d2fd11ef3e9f87ec241ef22111c38a08d1183438b555d781cc6f56bc7d726b9f","29edfb0670fc4c4006b0d4fcdb8e6771bdc0083114055ba2b47a0deb4ded5ca2","025305c9965dd01063dcf4ac146e54b415d926c252f5802e099e77e1438776ba","70d7591c41a200b0465d34ad31b6023080b6f9653df6f343b15c835b8f9035b0","f5645e261f66e7f4110bb3ca3aafa2e96c05aa61496b66f8681ffc2a555f0f46","9a7f5f3eaeff307a9805b8669be0211bb90b28da277f5db5c6c8c8ecd25f6433","3640cee02c7f6bac54343d2b01b974dac67f2dca8b269076e1c9d9f88e05db42","2ea85f0369d8624e6114c60345504e7be3212dc28b8770eda8c7615285998373","5da077eec7595491da9262716b1a729629eebb6d7b145ccd0ffe7d15ecd8ed47","de37a79a89249a53a7f52b6cd5f2710f404596422ebd756692e49576c96f0650","9df75d1e12ce5c8bdbd4218add9892c1f31a98f8ece31caa5ca241494f67328c","53e54f6e28d11aec6b3ece11bf25b4e2d7d06305313f09cece266aba7083c19e","769d32038885a12490c9901edf3eea3853f0bdf37913089eb73e34b2c0d79ce7","90aac0c0379b3865ec4b002eb3695dc461bd0aa66de2ac6c660b6e443865b70a"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3101352376 · entry 108e9186e8c5677ae91e…
Expected log hash
0a3f75a20ca5e11e6fd9d7b6a5afa175a84aab197fa1914018652863a1a64cee The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791258637050","kind":"published-quote","locale":"en","page":"brand:mypos","quote":"after finally transferring the money to my bank account, I was left with only £14.1","rating":1,"review_date":"2026-10-01","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id934401253?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b3dd30c5821…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.