Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The service is unreliable”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2684045120

Proof data

Record hash (SHA-256)

35eb8a0719cccc48e15c730676783bfb89bab8988cd11d4ac8b5d6c0e63689b9

Signature (Ed25519, base64)

cEAs27nbzx6M3wCW0whd+87mjl9nHdik76heCEf2jN80We+Xs7zZ8HYJPArDoFvTx/iH1wDeygqLt7hy4GmdDg==

Merkle root

1e61eced4e661484bfe5b6f5b2703dd6b75b86bad22e189b3c366c9d28063790

Merkle path

["35ec8d6b20f2eece0a62b9a3d7e96e54de451bd70276edbc3b005a08adf56a96","719e2a97334c2a888acf1982f2b2fa4895c6a680215eec9daa8f038cc7033f49","b8648afb4530e0869e7e4ca5a32e847c2b9cd1009b05cf5830561100a25cac5f","fa205d3e37a8d317b1da9012f3e6791fffab4d1caa8e5e025a0c60781f85533e","bc3770ab5c01de5bab32d44fb287a0f96a8ef46e43da0d164f0a5ef6d570a84a","1f245d9242c3432e617cac69bf03ef5437ff37b56946265a1a90e79ba013bb69","d761b529e63a541d8dbd61ad2738cf21cee8eb4cd9e30aea6cfb8956c9599128","eb58bffbe68241dfabdfcbd20ac4dcdc3e09b2fe6937101060e4d0c8f9aa16da","6076d8490626d4abe95fcbde2a86789ed380d9d257941d6c902b2b5a8b33657f","09dc9f35c8c6e543bf0a321e2b12469ec81e11dd5c4edf3e22f837c81cdfd078","70b4c663dbc0bd53e8df60eecdcc275d35e208c19a6fc168594800f0a7f44a31","d2d559fb2ad1f94b01cc8c2db03dd4139a44667a42d3cb7c885571299dc493bc","6739fa634ca2333bfc68a34f4caf9dd2f56f3f0c10aaff512e8c3f4c11231bd3","bf1bcad2903dfb9abf4b8f024fe3c81bcae7bbc24b20f79dfeb4175ee7010ee6","c6abe42054f9c95975c60fb1ff77d61160b6c8ce936c4b4f55df686a320e02d9"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2684045120 · entry 108e9186e8c5677a1eab…

Expected log hash

991cca42189213cf0723c834ba6ddec4f1bf618d506ffae30f68dbb14dfac402 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788333005708","kind":"published-quote","locale":"en","page":"brand:salt","quote":"The service is unreliable","rating":1,"review_date":"2025-09-04","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id969561743?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1e61eced4e66…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.