Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“PDF files open in a browser every time”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
36f6cf3ea3e1df2ab10708ae0152f2b82202f4f00a996ebf5fc72538676e4d68
Signature (Ed25519, base64)
sGXF70PmY8DGljqZFl/NHTewWlJ75R1wEWLvyHMCiq9K8SZmE6wBZWttX9AEW1zo39/hFaEbIN9LNSL75Re5Aw==
Merkle root
5e3f2e41cc1fd7787192ebeb079af6f990c775b2053326f968115de8dd824e71
Merkle path
["36fabef8f6c2e86c7ee8ee39a12572cc9176c8589ab4f2ee5e97c84eeb406d31","f8ad5a50a1f01497e331ac7098e53cac084cbbd4caff8dbcab29d107527e2356","64db61ef69816a66a5c49741eb90940962554752c5a708ecc7d80641fd64c237","9c35b1da304c5b31b2ce11d3e0aaba3897dbd5a563a284c34c5c152f9fdf994e","674f127b900d06f522fb313a07c98e4162f2aa54b5bf9b7a42d093584e0ce941","ee61afa7fdf16eab3f75e29e22311d46bd43b2e2bee8c0a07466a1d2f29aaa48","a6afe47f05e777d01f6471373246636dbddf6d3943495e24973c4eb0e4611d52","59f36a0425c0cf350284a413ad3cb9d9bac315932a51bcaff78fe135c6e1a42b","ae37d6bc432cfc93524cdb5e70812683f4f1481e99c5cb335d66a899d0e34b1b","27e41ceb1130b87ecce3fbaf06bdd8bd2e6c6cfc878354e4a4cb05147af511af","9174207cebaf737badc4dd9fe6adf56e3be2a51510aa35d54c7cad30ee3b7693","a2f9977b12f573f09aead38e62e17e067b16fe144adb1d1c3a3210bc5b2794ad","b571faf3453f3039b38742c332dbcb628f2c1dfbf5ec857c3d7769d1da16d67f","2afb6d36d3d2375210a57a6488ab98a278bb5bbb8e375833e605929207041f4b","a4325d4ccf36fc7ceaf4f8f3c2f4337a81e5e52c1c81c4c2185006d4bb2f79fe"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684302363 · entry 108e9186e8c5677aca75…
Expected log hash
ee19ff36df511a8edb29d6951b6df42f660405614fb2aab70f8340010708e45d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788336966085","kind":"published-quote","locale":"en","page":"brand:teamtailor","quote":"PDF files open in a browser every time","rating":2,"review_date":"2026-05-08","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id1377551207?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5e3f2e41cc1f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.