Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Contacted vendor but no response for days.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
34887412441d32c32f452ff017b464b732327b094cf37e14ade9706c54ccae21
Signature (Ed25519, base64)
XHSPPxW91jRcS5eW8N1U3coenUUvCV4w34VDbS2vSv+Dzl1CiXaKFshj31Jt6Mu3p4sD2LBUwvhB8CCiTsVmBA==
Merkle root
4814209eff208716b4535c2b0fd0b03895bdf3189545e82450cb75591e4887da
Merkle path
["348a443dddc58df8839d08c24249855c072fa2ff47c0dea5faad47df173c4a20","a8d1ab16d3bca776003463f78ed032ea6d179d175a2761fb596ead9851b7d2ec","6ee2701f4053bc76a830b56ebaa90d8abbdc7651e7f6f0dcbcea26fb79ea7c94","2dd8521be96c169a3d13ec26ab1aa35539d3cb465b42d766cead4fa2edf023e3","cbb8cd0092fb9d70271a4504db4611a32c855d789ff5ce97d32f105395a92661","63cc9ecbbb6d95945d9b9c0461a3cc280f60d2b67c85596362a63fb0606329e7","f086966157ec270986e2295ed8407362bef9c389306876975f0208b3b94b87b9","285f99bb1b333e17ff67bf7faefb3d85a098df3524aec535623e9c6299af77fb","f2a48eafd55b4094dae2b1656c2f17b36c32eb8be7330dba82659c5b60a8e815","2a482a5e878c9bbd8ca0e507216029ff18aa8fca29ac1eede49463d8f07d633e","40b542b64eb41629def892f9aa92b8f2a803787905bb24d260b4711eac41d74e","4fc3f7ad0e924885e102732985d05c6ed900edfc5866520c57f81d1a104dce4c","06056568f4a2b1f02479cb1a58506413e0f80ea3413afd3796bf7749761250c9","4222d4cb0e3cb98443733ef8f53c14d869249278d4ea410003cf03e3a343c09c","12d9d8014c44524a8d93c0e0f1440a3071b98d9de55311024d7d505c5879a63c"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671265667 · entry 108e9186e8c5677af0ff…
Expected log hash
0d4aa038b3cd3d7cc8a3744c8157ddb93929116887b29b6be030d34102a7e419 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788234112368","kind":"published-quote","locale":"de","page":"brand:tomorrowio","quote":"Contacted vendor but no response for days.","rating":1,"review_date":"2026-05-03","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1443325509?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4814209eff20…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.