Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the customer service is extremely poor”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
35f68691a147c12231bac1f5a4ba5788fa95d9743ac6c8a591d8e50fe3910794
Signature (Ed25519, base64)
Nz34/7PUVdaez6m1xDMqE9jS9k7+FLp7rSWXmcf1vtI7WJV5/nS4pNyEE62jxTwMOhVGUk10Ej/Nkn88SLv4Bw==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["35f69a949b4e729fd7dcb2b8fd001b63d6d8690de1b11744efa9dce2dcbc1c64","c97cb6641f53d98665484ad7c7441d6824283dd2a8d8c11b277cf95d3696bcf4","208b6c0990d49b4c9f7b79c5afd12652626d05c7989c12ebaa605fcda1803796","622981b33e50faa58ad3cecdb429b3c3e94f9b24045fa53c2308a15f383679aa","44a7153734e3aa4101ad64c822c9194331da27347e2115c671b491bb9bc4710d","5b24d6303ff64dcd4c3d066eaea149c0308d25bcc47aed2a235d563c0a9c056b","dcae38b4ff42927e058f6a8e88d76fd9b8bb2a8971af2c9ef8463f8ecc43eddb","2d979abf0a15596c6680821748b75cd9daf7a3a0dc46488a5dd8cf6492080fb0","e0e7aae23526202e5dc204e48c06df5dc95c983fe53cfa3ec57e1b2e2a001684","54dd0bcdc016dd552dbdd1bfd9fa3bcbd00d8743107c00e609e90cc0b8d947c9","3cb981bdedf9fa7c8f66aabee503ed7ca4c8c0f02a38228685b5a5353c5f51c3","e1fa6f392433e3742115b528fbb62d17c8e73f75e679923586644340f2657a0d","78c0401d7b513e155708f2181665b03a093a6cddbc8233872a0fe76421b285c1","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"brand:salt","quote":"the customer service is extremely poor","rating":1,"review_date":"2025-09-04","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id969561743?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.