Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“leaves about 15 characters wide of your email for you to read”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2881d95128e55da2b0834f2c868b25757d4b7b2e55b02f487c0dc615c7b366a9
Signature (Ed25519, base64)
s9BAAmYQEuytUhfQiwNPr9ZliBUdmIcJeLQEcB1SVCItMa0z4d3NTBTCqYcPc5rkzhCcxyfv0UPbUaU/vGvVBA==
Merkle root
91ac4838fb4692cf2c714cf22417014bde85e9d7b2ac488478d7f5ddac3886a3
Merkle path
["288522ed60be747bcb2600787c469d89beef2d0ba9d3aeea7ac8d48fccfec1e3","fc8188f2d42ec20d278b127dea0fbcb11ed6c23ae31065c2a6f619f64f46cde9","faf36c84f7f17cae8f0f14ced2b5c56081ab9c7adeba7131f9509159e161f86d","b32997ca7b4ef41081bfad9d4f7bd8f8922372a3f30eec0bdedf9d0835433754","f34d4925342d686c04d6721ec22088551028599787d96fc5fbdeb6bcd0bb13f3","dab138163c01df75130a0a194db9eb48b76b1239f47af11ff10a81eeea067275","2611f6b732ee7e835917372ac468b610585687a8242eda633b50e5d253b5c259","e9a50e2e01031d695336c60bceee617f6645586a6c95ad3811e147396c140b9d","f83c1dbc9e8c205b569f447e14c54fa219a7d017fe78e89efca100cfa9631734","98f982649319d0cc350c2e7ec38e899c119d2ca17c3e6f61d09b3ba322c2bfd0","e9872acf84174256ccb2ef0a9518d6429412222e83198b08d2127b0993d4ef08","d8b72c6653070b1f720e67e6522640ee452ce3cd37e767054e3f4480f6132364","c3025b7778a1a77d581203e23f18baf3b8e43309007afd7c7abd033cbca39cbf"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3668758047 · entry 108e9186e8c5677ad50f…
Expected log hash
69940c768d826da6bb4ba0910028f48fdd278e42d608b1f11b1cf4d36c54ba55 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793706887256","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"leaves about 15 characters wide of your email for you to read","rating":2,"review_date":"2026-08-31","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id931370077?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (91ac4838fb46…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.