Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“app keeps asking for Apple ID”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
240fc0fa6f89ccc788d1c799546f0e5b87a092604575389d017586907478c57f
Signature (Ed25519, base64)
XkeJT77UApdCiTV4BT8UFdwDdRNVIBCUvUfcq+utxK1Xk2Ka4DTVM0qtx4leTiwQC+zQgwfOY6CtZKHcGwlKDQ==
Merkle root
12764493a64961d0e0d426bbec64b837c2e35bc22a58920afcc56db07df6e8c9
Merkle path
["240bfd7f4ee3ba1b5862eae781cf0a5ef2af444651ed8e5e81b5fa3b32c08187","e3a228dde0c3635b44863320993bc2336c4d26f5656862b35a4df51db59ff2b5","69827f59e33df046c3943a5291fcf9c93d1c1169fd36e3825e9fc19f1decaa57","ac1703b1a1b89ae3c9ac29e6cff4b53a08ef3b87db37648f0a7249101c901452","042be245aa58a288ee7e7a31fe3ad766912c9a42336689b9fd3fcb91b4f467f1","cc944bc7997406032e3c85917e05247cee97ade86d6014fb0ba9d398eb273409","c04936da33ceb6961260a7d16a394145aa9a1c704c98a253880c5e7b5b0ae5d4","ee0fd295bce100f1b392bf383ad74ed6b8a6dbfc271c1a33e9f7ceb3c0c9bde9","d5952e47cc236d36511b0f01fa98cd8d68697dffff3ae3c8c6952e3276099836","7f3a3ec57a790cd251c2c1541de865bb8b81facceaeb8bbc6dc9226325304147","f21ff959a638ed664bfef10f083a14e62333d41f01bc38bad0e058c79273a381","b52a8a3015ae5229f5a7205f9433251f53bb2b22b2f3bb0bfbb3deb2076f2c89","b6c6b7aa75be4fd4f206793d7c98702963f427cfe45d9c46972416cafee9a131","bf01790763bd70681430a2841b8504c59b88918b5b88c9d70f6ee7041d7ca6c8"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3198225546 · entry 108e9186e8c5677a10cb…
Expected log hash
a11b46fc63b94f32c49058752856fbdc4e92f7a41d4e67238e3563657fcd50e4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791685609571","kind":"published-quote","locale":"en","page":"brand:casio","quote":"app keeps asking for Apple ID","rating":1,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.casio.wac_app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (12764493a649…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.