Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super application”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2432c844cbd3bdd81c29e25f975f492f2515242a3bdb3d459253134be2db8dcd
Signature (Ed25519, base64)
iKHg7izqEKJMdvdrMI2Zxx10BXajLqz3JXAAVxy5bN4X+KvqxFoWGNs7/9NWVl+FLI2GgqhaxG4pTXHsterBAA==
Merkle root
52b348c94f3fdce59db013e2d8b151833bfb9c02163bc60ea07ad4321b96c806
Merkle path
["243705f37ce2d3a6a19fb4c07f34b8662722ae46176884b276f14d8d2d8bd19b","0ef3c25b5640540b35fc0d8752ac99ec44dfb2346123f1299bab5a8376524ead","75cd299f0cebc3a9d9eb06b7cae9bb037d6862db89150cc9dde440d5d518f309","81c3f5399bac9f8c5f494414dadacffbc9532ca3aa2414d5ab766868a47f3c40","3a1302707459df5f4cb34952be42953822fb22206228dc214be925fd711efbfb","4e1fa13b055dea95b5ca4ee65fafa15a511796d8c6937dfa978588a400b16cf7","2d6d4d92e71067916dc4d42b6ae426c03eb91e7cbce8ef9433e93b238c3fd9e0","d7e2951b23afa8b4f4dbbc9d639d10450dfbfac7e67fa25882eaa3332c3b0ed7","97cbe63084818385c28089e0284eeb4fc9280383339ed690978d7c2d26f36f0f","dfc6596a7066ac9de48ccb660422bc146e2a2426b8a8ddfafab3cb70a4465001","2776aaf05eee340ddcf83da8557afa3df4be07091ad262b9aeed0ee2b872af26","99eab656dedba76332b8b09868440641413fdff6c79f07674d731ea51d5242ec","737cac4ca199ff9d501e9278c7c4cae2cea135754fbc58a1df4019ac06ac48eb","775de910b40798d9f37b75d39be79e50770b797482dba1aef04bba70619fff3f","50b301601f25f58ca39a522d1fc14c87ef92ff2847a542557119e06fa2bbb889"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621349433 · entry 108e9186e8c5677a91b8…
Expected log hash
c0c478568c16caefc62b4dd151387aace853e1d48501c09aaebf0c1fbe3c7cab The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787884935070","kind":"published-quote","locale":"en","page":"brand:helsana","quote":"Super application","rating":1,"review_date":"2026-07-07","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1276583488?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52b348c94f3f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.