Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Reset password, back to login screen, entered email and password, again: account does not exist and so on…”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2449b2c5d289a14543e946c5ecbb5847105a5ea18714c01294139ad40ee0f4d6
Signature (Ed25519, base64)
WIx/TBrH9CNWaN53KdUbuww+wCJrO2XDvK7bc+GxubslexYe1uH2pjcVI2BV36ls5GFBYY9LEEEDZltiy0XgDA==
Merkle root
e880a518ba68bfe85ddff87a241b258528b2896d8ce031c201c4697c0b7d2205
Merkle path
["244b826ed7e56ff5d4b24403a4d4be239d52d1af6d4a63e68bcc320bf3575beb","20cc79638d690652ebb59f48b8fe922a67f0a9938868951fd80f875f577523d4","c1a34f7a8d01cd9e9c6394fd55d3ae979c8aafc951331c139eb92579f4b992d3","d66d63259b5baf2f0e9034fd934f86ece2aa05da308f7b355340e89fb1a8d989","c6595cb37dd975f6654712413ee435866ec93068fcaed6de3de5e2097d556656","3f6cb09634b11f802e1d1c51f5e5c170d14afed1ad8636fb932a56b12f2a0e39","a1e33ccf13576ca3099a9361597336c7fa5d341863d43a49d2f39b0b5e9c39df","2c8bf9f4d8c2880784bb6f81d9ebdb6e6d69d2ff5e7a81df730e6960ddfe786d","112659d61217da3ca59b7788fabe86a1773ffc9390e19a18c61a4c7ed22c96c3","3fd8eb4b668c8952dc7cdf48a6428fc317bd33c922cfd561ea3681cf0ef81533","45a4495022157a60163c8761bef64cc86c0f8d3033b3b9b61bddc971c907573c","1c10c484082793dd44389088621d733c5fbbdc91f13c42b1e08d65545dca91d2","0e6818b49626845facd47486279f7e4a6689ed0beda657d93a969ab184e1e0de","8c997d59f41540bab49c6414578aed00ec9a73fd31959523b43a0af5a2eb1e86","269c643459740a67a842bbee9fda4a35b5098a4f015e508a69431212a0912770"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2680681799 · entry 108e9186e8c5677adf7a…
Expected log hash
23ab6878cbb153d06d6958de44ea3fafe32bd61b03ba95bcd26de9e09248aedb The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788297623062","kind":"published-quote","locale":"en","page":"theme:pixum/returns/en","quote":"Reset password, back to login screen, entered email and password, again: account does not exist and so on…","rating":1,"review_date":"2026-02-27","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e880a518ba68…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.