Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Why do I need a downloadable app for a web-based solution?”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
31b0318f01cf594bc0ca243c74ae9a0a82bd468695a30ad9d2ef9443f9abae31
Signature (Ed25519, base64)
2XAoOB8+kOZ9Zb/xTNQ+HqsSWiY6dvhdKEb6bvZGvVWku5DXDbahdyPmKbUFA8dX8GYFfAS50XcmHd3O29e7CA==
Merkle root
e4013647f339499bd419bb9f69745e1d5e6273d32dd17f94b6c35c2fc080d1e8
Merkle path
["31b1759cdab7d192317db0bf85198c592b1744c0bdc4212faee3af3b67f378ae","4dacd6fce41abb5ba0e02a41d5f4fe812e91911763e787b5803f82ebc42982b1","04ffd934d351d03027494af956a48dc8b173008192536418d891cabd11b2481c","d83fd9795206569d0f5359b943394f1c9107d9ff7cde8bec6e4cfbab68d5fbbd","d8b9c4a0593ff5bbd0237808935e2688db262536961b2fe3d91127febea63505","b7e4ab1e02c354fabff4f28c961203aaf12145d0e86ba0dfc1237a18e781057b","f3fcf8c94f0e6cb66c2fa5c69067dd04c21825a3e21246e5e93d50676588ca23","3aa415e6bf2d823278c07dc861a93172312173f104bdeaa17e514878ebbc9bd5","769d7779f5649b6a0f3bba8194b97295a9902c8fc34c85373abc522d5c6e8931","ffab83bf22626db3403a3b67ea9f87402142cc8dda0f56b2d3a7b1264500b882","c176d67561ed89a34e91500d3ed3915db2e9f1a6647f48676df10f49048f8b5a","32325a192cd2a45cd5387a2a8c696772db9ba591c75f060b8690b05875ec0f2a","b8b1f1ed79187e242b952af0a63a68e12dafc3b2d98c28f80416ab656b58eb91","3b1a28d2ad07744c06a00c9b4786a6cdb14dfb04fc76bcc1cbaf73cffed41efd","d68efe45fdecc3c76847a618a62019c7deb410aca5cffe58288bdc27d0bcb771"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647547434 · entry 108e9186e8c5677ae1bc…
Expected log hash
fd8e30fab5cac12236b44671823a2259ebb0774adc4d1a33fd6a7c90ea280d43 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788063921301","kind":"published-quote","locale":"de","page":"brand:drawboard","quote":"Why do I need a downloadable app for a web-based solution?","rating":1,"review_date":"2026-08-10","source":"Apple App Store","source_url":"https://apps.apple.com/au/app/id1086503728?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e4013647f339…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.