Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Doesn’t sync across devices reliably”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2f76e63e8bf46bdca56b0b330fc31eb9191f2402554b588e1f0fd61884b7cd88
Signature (Ed25519, base64)
pX3OagpBXc5gyDnpSZDLIrQvp6W7NF4JiCDLQX1y34uh5GTPbYZe67+io65Unoil0QehfZFqMdO/xZVUvhIrDg==
Merkle root
0d7fec37eb7aa7ca022c461398d36283692153bdca7d5292b2302abb6878e5f6
Merkle path
["2f7276094d1c4190cdd7a0046b17dbad8aa7a78e01dd536bb5cb9bc2f180b85c","d49208511ae0c89e107770df3ee714948452ff5be81b8c5adbf6f5c57dce7808","6f1ee0f730f50ccff5c91846c49c289ab8dc58a15de81316d8fa231707e7d721","55a84cf0059ab21f57aba4ee22b0f7cb404f210370682e001216ee6282245de9","99041008f57ff2ecb0b4efafcfccfc12f941d73172ca66d23bd0b508798d0a20","e820e86af5594ce86cd33ee975203c9411506795438246048262ad34ec55fea9","100ec1de1b9f1cc76f015001fe133f3458aa0ec8b91eee21ae77d1e03eacb757","382cc09d6ff9fdc59030b9abff07a5809c1135209054ecd38824d27d0b313de6","2f346c83452a2be99700720732eb5f3739ab3e2bd2c3dd60169f0f68a393eb8e","bc4e94b6a3ad2a793aaf620da6691c06ae21e94227700ec4dd8d928534bd5639","d203344055d45c7cf411b720967febb2998b66c133d4186b7736fe7fe35e61dd","154ea3ce3953e7a2f9310701e07b1dc6a4db12547da6d49ffe0215737f5d6220","f77c5de7cbbb3880e295e9751b837c38e25497099e33ceb7e9621a8a350397f8","7c6f9d1168e8a2f5a015e8aabaa46428ad67e71a9293d82f20ec40d2ad6c53fb","8c6d73d3d8b42a55077d4061fe37663a0906972431ecb9eb374f1f8461206839"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3126883925 · entry 108e9186e8c5677a6678…
Expected log hash
7790667e260445bf729ea3061132c2116b163a0e0b944eca343c9e8408350ef6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791359818972","kind":"published-quote","locale":"en","page":"brand:nordpass","quote":"Doesn’t sync across devices reliably","rating":1,"review_date":"2026-09-04","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1486322860?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0d7fec37eb7a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.