Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It’d be easier posting a letter to Santa Claus than getting in touch with these guys”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
241d108596edcc82047b6e89ffcbc58efad41b9218cd8fe3f4e5c46f6d17afd0
Signature (Ed25519, base64)
ZvpOCR3JcsqAwAtdNrm3BhMKeFlbF2ZgBBTLuW3IH45/1km7ZdI3S6Sknvb8JaIn00ucfnnq/21mqiYQl78zCg==
Merkle root
9bf5e8bc71b8f6d2ce627972b9fb81fedd792f7b02f32eb60fb8da440673ef59
Merkle path
["2414bde393aea2a18376502cbcfe42213ac425fc77ad6108840474f2395fd5e9","897b828f01c20b5dfe10f44555d69faaf3e816e1f2f3dec6d7daae014771e9d7","6e75df3d57963c6ea9e1231a2845c110adf58b36cd1b218dcc917706de28cc93","2f5a020cf81cc59f493d4985f9b07fff29f83660d8554c4ce3afeda7d0f86d67","5f221d9ad7f25111adf30dcd6e94059b24a5e763e942c01c66586722700cac32","81264ebdc81b18ea1de70b037a321d724881a6a848a308e7699420c796d3f2b2","832a4859f0788711409f1deaebf0097b4d9152c7f0ab6a1a334f46a1b5120273","c9f20db2199d12081630707ace0450928a1755a4e0c462af142ce62411871190","1021b66e7d405247075ed386d148db092ee8dcbb4d8695b903e4ad0d22e71ef9","a5d59fea3fb2ab64c66e8d19f9e210b772212270768bd65f761204d2876068f8","633dc26335fe45f33f3010a4079a2aa60318ea8374c045a7c9c1cbba090fa33f","53dd6904824ad544916531788d61c0e418742b30a49a317c1dc2fd8a01bbcaae","fb42483682b3119978267e05c9c995226602ecd8627ec630ce52b285c28faff3","09f662acb98b118c251b87092b3ab5baf38f48e2410961a49013a1c2f63f4cf6","1fa7003be7676d7952d939a45bc47245b2ced828dca06428675c885e312c802e"]
Anchored
2026-10-10
Public log entry
search.sigstore.dev, log index 3177778280 · entry 108e9186e8c5677a59b6…
Expected log hash
6b6bda8efa0d998f344024bc1a70908bd21604d8857c81e0a6e6c5b1de7aa565 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791603230890","kind":"published-quote","locale":"de","page":"brand:mypos","quote":"It’d be easier posting a letter to Santa Claus than getting in touch with these guys","rating":2,"review_date":"2026-09-08","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id934401253?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9bf5e8bc71b8…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.