Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The email import API only works 95% of the time and isn't reliable; it fails regularly.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
38fb3a61bb269ed6fce0e82abaf3af41763e486266cbcc52548d669d1acab79a
Signature (Ed25519, base64)
bsF1omcvxfar2bbrfJ/pkDrbUUBWCYRTq2VactqEV46qpvArE82L2wIvJA7+Vuk+AptKRCLpsq0FD3xnaVd2Aw==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["38fc72429f6780ca57b21bf1542177110ea0cd244575d8232ba5944949b0ebde","5ef86616e39d06350ef707c608e5a6f9679f7ac65fcb67316e44e6503a57eeb7","79b1cee35b2b75536f4694bcaf62709286c3347393d801021ed0c9bc297ee6f2","ceef289acdf711f847455a71ba1ad267836591c9b1420065cd71a1954b22dff0","8d07b7ff3eea5b2f93e3e1bd0d03bff5509becc398b34cdfcc75ad55844e3da6","6a55fe4795119aa64c59a361e4ed2426accfbc8650e0c573ef14e8f69a3479a1","5ed7725cbded10ccb52a5f0bc0dd0ba71f5e720bd2789fd8daf977ae7cee5e91","893fe42c9c8ede51ec88c1cafa976e0517395443d16a0a34ae4ff45f9428b4a4","57ce6af8af87a9424ff3033555596d6cd46a89de67855f14561479e03df9b25a","fff0b3b25866d82fde8409f8364f2a6ac66b97eca1aac62257fc8191cc897682","3cb981bdedf9fa7c8f66aabee503ed7ca4c8c0f02a38228685b5a5353c5f51c3","e1fa6f392433e3742115b528fbb62d17c8e73f75e679923586644340f2657a0d","78c0401d7b513e155708f2181665b03a093a6cddbc8233872a0fe76421b285c1","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"brand:sevdesk","quote":"The email import API only works 95% of the time and isn't reliable; it fails regularly.","rating":3,"review_date":"2025-09-02","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.