Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It automatically signed me up to the most expensive subscription without telling me”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
349847e23015105f528ba23616cfd89302cd9c6f111a057bc5e1c5b6ff5e1d5d
Signature (Ed25519, base64)
yUUEqvDVfD4RQ7SkWnLPkAXIjimAvArsvFdSxGekY4JlT1GfqQyKZJtl65RhBP+4vj3hhfOtlFVYB8BWVew1AA==
Merkle root
4fe8751e7d70c50e0cd3fed6e9eeb32edf31f624f79d82d9ec3817eddba7a9fa
Merkle path
["348fa751d0cd78961786c0a1d823c0e08218521a5e0a7cdacc58870742262d34","cf1cd73983459abd449368b170161af8a5a1e7a22ed02b98bebb04af46ae42ce","9e3816e204b390e60cae8837ab74157291b8b5bbf15b20f4ac02000de9e7d1d2","ea69c3c98294c100d53c0ff99daabdd6da69b5981b2c34ea1c5a782974e8853a","e93047e34d36eb51a52825de74d79337f97ea57bb1c4425dd81aacc749c962b3","c4d2b6390a2717260caf3c52a20c73a081d0652c558328786a087b0659f52874","1ef951b790bed0090e3294fe3702d8d9e7c5cd79b9051e5bbd725925ee70b169","74bb0ba84607fa2394fa76747b89bd219f95db600db6edd9e75a61705b5e1974","ed7f82babfd1383ac2a1c6ff84d07ad70ed749097b285d07c260b02124094351","5939ed64f1bb166acc4a822f97dff6c4f242f5892defbe1e585c8902bebd82d7","3fec12bef0eb3a6b4e81a037421cded26ce84cd5a6f53a2d51042a426aba921f","68f093e364ac3be8a5464236fc194346417d66e71a492c083418bceb7f1b959f","b9cbcfa50142d2818924cbbcf9ed0d1f201b4fb9c10e46572fcca45dc6f23f72","b949a5b1fe3c5409c484815b6b1e0675f1b11819a9236a5e546056d1971b9a8e","1d8f51436982e85b24ea8b1426a5f0ee7a81143ad75096c92a05493708dbae01"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2682933759 · entry 108e9186e8c5677ab48c…
Expected log hash
d15c976489915f93c119ef146e715f5c01d5064a289c9ac130af05811dc83d56 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788318759763","kind":"published-quote","locale":"en","page":"brand:bookbeat","quote":"It automatically signed me up to the most expensive subscription without telling me","rating":1,"review_date":"2026-08-30","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id1056652614?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4fe8751e7d70…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.