Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Can login to account on the app, but cannot access the app.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
34ad7e2e6dae61c093c54d2f5604a00e66b4c4e9f53ebbfbc933a99c051fffed
Signature (Ed25519, base64)
jUYwn8OewAsuqRm9a0SWAwPbt8T+GVww8w2KsBEOixb3MBlOzFsZaM95Yuj/4aFCPRKHXCXTU8bBwriPPTUzAQ==
Merkle root
fd1a602e44fa6ba18366d47a3f265e8867d3ace19a93c5a056eb72338ad99351
Merkle path
["34ad017d8225ba4bc1437790ce2218b7e82e636eefbad171d8c49b9fe4159236","774a33ed871832323ebf9c7bbe9247c02d422cd5a58c198d5b4be5994972336e","77c72b964c219c42a15a0c0b0fcbb8737a6c276f27c97caabe2c1aa7f5b77092","95748438959fbea1ee38e63062ee1a14b1a5b920dbee407f6a62726c49b1c1d6","5acbc8febc500e00baaccea61c0a97e00b1991546e59a6402ffaf5bf15fcc442","702f1c74a19e34df8f39585d65363f877a3c9477649d2d5f6df4b8a5a707f695","3a33b7e77b37fce01c010e5d374b94cceae13d6a04c214ff91bb0c4423223164","890c25c806b7a59e33358f3a519210bde2ff821071d269ddd93209d8e9b3afed","34a882c6266b8711b95581918f9d5d880089abd2f6422f86f4ac95892d620e68","0dc55aaaad01e5e8afd827012258670ff945e4834f6f1f4c2293236a3776e2d7","cf6288f16779bf391a745471b992e689716caee1daf5958917e41978c8f13888","2c821c99a404e3bf7a80f060bf3582896dc9e719ae90e80b7b176d1a3217935f","b8f90d250d9b02841259d1e30ed0968d35ada2dfc556df1cdabf044a1c7831d3","2378b1f4ffb68987809fa6edceaf7a29de059238214cacdb28aaf8d4fac29206","3892c8cf6eab6a42602f82120d415bfe3619d03fd8bb7ea92db6f133736d9c97"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671573458 · entry 108e9186e8c5677a8dd1…
Expected log hash
5a4f32b3215d6831d3b044c579372ade08bb930ab401eeb59812a3fb27e3086c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788237136291","kind":"published-quote","locale":"en","page":"brand:salt","quote":"Can login to account on the app, but cannot access the app.","rating":2,"review_date":"2026-05-16","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1258680285?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fd1a602e44fa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.