Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Bring UX expertise in-house and let them help.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
28c513f01bc94ad68a960faa2167170327dbf3843e2bd0faa6a5cd12f4de6902
Signature (Ed25519, base64)
2goKnb9lO/Jh5gryM6V/04aS60H4APbAbVTefJ5FvdA8iTa4UPArb5G/wZygds0HMoRyKPYc5zi0onKhfDAuCQ==
Merkle root
beebb1e90fe7e67e33cbec0f03b99eb76d51091b0320624790586a3cdacfd28a
Merkle path
["28ce6a1187dd022392c2320e095923aa4e5a57b0b72e7b14e8488fad43698631","a2379a7006ecdb009a31c30553de74629f8593326d54874e3d76f13c04164d40","48f888f159007df6d8c2b4eb563a69d261f7c57b37195ea99620dcf7dee206ce","1c500c0ee6ffa3ff405677f2aec288afd51ac0b09d69d65a99edb50f1010f01d","b3303a3b3f594620a3754a87c09c714cfaf97c92f80e6c5bc83c61c4866415c3","6897668c14def91afec3e9add0e67356058f8366f5b116575cf703e56be15803","eb8ce450e03f20a94bcd9bce121ff40a844f8826250e3a3e1108734153ffee9c","c642d07afeb4942d81692c01f5f96740e7a8e13a14f0b12059736ee8e176d73a","48e7a2acbd34810ad0150aef20c64c479170135553bf2a7d7249e559eff6f5e2","19ec4774e8146ac7d8d9264b092ba0945899db5602a00723c9375b92af2b6058","bc449861b1b9776e8f79876c197977366a7e29beac9b5bde399579a3cb58ed12","bc5d8368e440ace2e5a476d921b733a5990d41f9ccc918701776a084b954cb94","19513067f8bed92dd7049fed420106f7c62159c37086a1108cbdae0ca7dc379b","8e83ff51c482865a520be89d3588d4953cd4ef6526700cb062f0cfe87ac941c4","59e1d7599efc1b651191f22a2d0a899f2a3b0ab0131905b8aa9a10b3a6f59e7d"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671517691 · entry 108e9186e8c5677ae4c6…
Expected log hash
207971f16b8b3b4c1e6f63e8e9291188fb84b37111ae3e0c78101499642ca382 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788236415966","kind":"published-quote","locale":"en","page":"product:pixum/fotoabzuege/en","quote":"Bring UX expertise in-house and let them help.","rating":1,"review_date":"2025-04-25","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (beebb1e90fe7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.