Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“making a web version would be awesome”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
360b2ffced9c47b977ef1c44c207f5aec15297f6dd848809d31e1785f7d9771a
Signature (Ed25519, base64)
SYRsUwO1IxR9xOEsMowjsGXevGopUvyv6K0PQmY1IxWHlv2o7OMWpTIuZzS/EFYwC5552fPkaPN9WESfLE3rAA==
Merkle root
78886eed79c5c55077432ce3df8d075efabb6513370ceff84d7b706b9eae04c7
Merkle path
["3604b2fda95fc19f42ada9a98afb0a80fe18a63b0ed541f772def25a068fa3ac","1847f07695bcd0d904553716e33e3cbd57afb5355687c39520935b3e6040ecbe","86ac0a568963a85e2638ddd975975e30ded6dbb898aa43716af753aa08fda4f2","223a30814092ccf117153c5300412742c2bf9b593e3c60a3457a2540d2f27140","5fff00401ff5aed9dd98b07b5203865180e804483e1ad04d52a685c2d79f78e9","520647b037eff7a068977fe83cf063a3e4840b8e562a74a3f13b8ff16dc9ba47","a0a99cd7517259d728b4a39d02d95921709de95c56eb207366bae8e1f5caf638","b5d669fb8ef0f59259cf4a316079c247f8ae1b9853746beea554d89816488f45","88e9cc0d4a90770334abb598768452fc4fd1d24d5e282e5400e240227fc3b503","02856f13113b9db4adf6c4e5e0e67b835639b2b97d223a69addb7fd5fbb52092","be2377692f42c8141b16e255b0b68760bfb3364195c9b935cb1e1cf2b61c85e4","aac120d0f8e2757de582b6fc275ddd00465d8af26d611e9d7878fb3a8f15a900","0e00d094625429d066a6e86bb04304e09231b093ba6419198063eafd80b0b960","dca3255210bd4138ad43ee9195c33d4e1bfb62117fe1834a1314b7522fa9bfae","4799bf594f7e0d9e563de0da432e35b6bec9a5a67d166463ed76ae787b7b69f7"]
Anchored
2026-08-27
Public log entry
search.sigstore.dev, log index 2611910343 · entry 108e9186e8c5677aed98…
Expected log hash
357f342aabcc9f7336397f12ae873d9647084d84f84802d1a7af0f5727328ea8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787796746663","kind":"published-quote","locale":"en","page":"brand:bookbeat","quote":"making a web version would be awesome","rating":3,"review_date":"2026-08-11","source":"Apple App Store","source_url":"https://apps.apple.com/pl/app/id1056652614?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (78886eed79c5…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.