Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A bit complicated/unnecessary to have to pre-announce that a payment is coming.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
37cc37454d73be07fe2579b8f0b9ba49ada367d0887c8a614ba2e4d050e28016
Signature (Ed25519, base64)
kjJVqZkHOZFsyE4AwGkiexZK+tyJLCOJuSkDwThnT5/oCth9+3JzBqkLs8f7MRGz5IexIukXYvO69fljVamfCg==
Merkle root
3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path
["37c944ecbed0cee8e66800be0cbb5302ac7dc5b0380d987125c137952b42b931","db9ffcf0288c7f492804c6a77c69495a8a0dd81cd2c5ee3e542085e8602eb74c","15d6b93f61165476381f5ea83dbb14a43540b109fa1970a5709048dc3886d8c1","79af5b3a24c8a04afc465e9345f4c0eda64a485a4856f34123df4cda376fd708","df2ae172db64d16dc3110b0b0a330330ef9fba3e3f152e473e607b4d3ee32e0e","1895e86c3dacd53fab64fcc67409c6a5381428082e85d486634269fd30fb2497","0aeddfc57eab7a29d1ad6ef66d61727244b3b4ff5d7b94e4968745f4a58af7df","7ab2dc9d43d4dc3fecdc87dc4738f903ba1cfa87178d672ca9317a7684ef3b84","859f93f1c3d9fd8f4692295d3bfa5dea8a0d603507f597a265d741426c605c13","9c9b374267d0e8c9080ca49491069d56ed5d5692c99cb251a0530241abe48f24","c8d60862b4e86fe489267adea81131a7e5e3a271455c67cf574c10273904c2da","c10bb5f46eb36cf36fed52cd233de54b10d44a15ea6a5071510334fc522f0f27","a0680e646c3acbbabfdf8601219a4845c3cdf4b239e192c7eaf9f8e26bcf7dbb","c3a6c334f1acc8c0b843c5d43c85ce54d647d519ab035a8287aee565097a2ae6","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash
d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787131980797","kind":"published-quote","locale":"en","page":"theme:relai/communication/en","quote":"A bit complicated/unnecessary to have to pre-announce that a payment is coming.","rating":2,"review_date":"2026-05-11","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.