Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“has given me no clear way to cancel this”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
344abb778c27c2400eefa40b666f2c13eb88451e089907ab489a7aedd0c30691
Signature (Ed25519, base64)
0fB8vNPvWr/qaaO0tIhswkQbs8whVY8JnzXXaCl2yW4mSKWywspqTbdPtUQpj4PuSnMDuN3fmzWdUh8X0+5mCQ==
Merkle root
c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path
["344b39b5eb0497c344550a6b392ef60c5b9708cab19b58c160c1c6547dd6596b","d75d23e4cf8269a4e5ec380c83c4a27a585563dba217079f4a082e8baf409bba","8f897f9e4d7ace50832cfd7216ddac67f8b148d792de906afe07c1e8b8859f47","10d834aa2c0ebed11e0283ed35659a469bd8ffd229a051a58093b78007cc9064","630db04b530070cbd8fe3aea2bd475f9e64d84dc00adadcdecefc21d0c7be3e5","8fa4451cfe36a8f10595831057d34173b24d5b2d9f365797c2a68275dee1d91b","6c2e66965358d8eb49f809a6609213c929c147ea5ec0c99232f3a8fd8f02a223","f381a0a33b81e94df3b96989bb56a59f526afb2b830eded66305cbc8f71e0f7f","77280a75405e5ace3ca647c61c1f871fa9436dc636dd27839c202ce9711543c2","43feba2c81d54b510f6a791de74f70e49c2b2d59a23d20cec4f12fefacf45d24","7c2f01a72bcfe138e5c2705862eb8c08ba2ab74ef4c27765544466dc0bdb8a57","a7bc10fee28f2981570ac167ac37dba5147bd7749c0ca1ebb5641065ceffd258","cb9c27e685a1a40adcce5aaa0d4ab0bc7c89b1edd82b7ac213f34036ca479ef6","47f7935efde5c1916b9700110a56050667a486da6d01efbf1be7671f42769e58","2d9d4b958999e2b40d6b124a0a8044720e0313c217d237832e6b1171798873d8"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash
6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791183579482","kind":"published-quote","locale":"en","page":"brand:bookbeat","quote":"has given me no clear way to cancel this","rating":1,"review_date":"2026-08-30","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id1056652614?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.