Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Great and simple user interface.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
389a788c1a2991fce8b03e3562f68cc95d62cd9dda6f8c126aec77d9784698e0
Signature (Ed25519, base64)
yTovFix01/gOEwYze+TibHiWRyhiruau6/XBPdKCKmuMZ2NJHW9k2vwWEdW+LrWdtyJmgYJUrd5EAN5/5OCrAw==
Merkle root
d9909e7ff193b610d96d9930fa8111baf2fdaa08b732478b03ded2b9e1e52914
Merkle path
["38941fbcbb53054c0d61da0c107524b0b9fdea84d42d968821fadd98d0398e4e","fb2b7d2fc55c2bc40a023ca0a54bdd3d20b3e2923c0c59cd4edf8fd7429efc0f","72d7c199a909fef972438f7a1572109fe7b96b84806c0cec9e1388bee7437725","a7ca078bcd71482800a462d1329cd44fbe8770551afede4774e1ed5e4fa8b640","b6d8ee0b826c5caaa02a0f003dc20608e989d2c42b55d57b0451d0a0fbd3a562","527995bc43807a0336b09ea86660562f5aae6a466ae5bd426723e8ef9784a4a1","9d93a6097f93f3f8f3baba70df1c5a9fd5cf7d06356f5eed06b5edfb451d0b41","62a618ce2c91a81089107a11f58a340c65c1c97dda448e9a9f763770fd96a77a","a2288135efb25800c1da1016ed8868fba191ac0831a4da75d38470dda995c456","2a60c2f3515614a2ec7c4339599ff85be1b804f69e62b74ae0b778c49ce3e6ab","c6260ab0067194ed249f1ba2077229870794ae185d080ddf3812e3c0d949ed30","92f0effc8471e5373ec66ee66af9c30ffd1c50d6cd7d1e180e5da63a72cdb9c3","0583a3657a7c7707250b64b3439ee76e599e48a7fca8004ea89afe87f756b292","c8967a31c6292f2cfc7ed9c390f7083b1880ea886157cf89b881616d7130d93d","2aa33c224957c89d7d414cc43142ae7c4368efde4f1a1b6051ee910ab17bf997"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515095234 · entry 108e9186e8c5677a299c…
Expected log hash
6f0abb2e15f57da153d99eb9fe756fd2540bcac51fcddbf7ac60c4be3cfb5f7f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787136684512","kind":"published-quote","locale":"en","page":"product:relai/bitcoin-savings-plan/en","quote":"Great and simple user interface.","rating":5,"review_date":"2025-04-19","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d9909e7ff193…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.