Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Another update. Another frustrating experience.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
397e4d20791af2195e48e07928dca672812f5624f487f894c9bfa3570fbea103
Signature (Ed25519, base64)
NIX0syePwIf7OQt/2qeUzbSOvd0goTO/BTJZzevwWSx12cdZgjVnTjgGleMbb2xdI5d6038AN2QrpPceydIuDA==
Merkle root
f0c601bc37f52c70ded17f76faab5612e674bc087c8faf99b4d2f53e921c2b03
Merkle path
["397f20194c895cf2f81434bc78368c5cffe57246e75b2f3c1eb4489613bb7fc9","4d6dfb596433642556bfac93f6da32da26c5bac2c673d178cbe19260cf4c53bf","bc283d73a7f594d1b532229594f911d310a75b38dde084700990a64f1d6f142e","64412a0ab6dc7a365c79192a20d45243aeb323420150168ae0531ce9aaa5e8b6","a92f3b7fdfbaaf02a46c817e75a0adc828405fa6ea7fa083febd0eb11b6b6fa3","908a2c4a10b8285cc096f81c6d0d825c5c4b1750109f34c1775fe2d8bdde4e87","ef7032500c13e2ba6ce91994e509e0b448349d4019522568e070ecd56ebd82d2","9382a97b2207227e409f4e32c6f36c4f7ae186dd9d6e654d4dbd2d326a848f44","eb2e7431b625b295d707c4f523d641ee54e1cba80c19cc131bf742520a46ce79","51707068acae6546ace03377d0d702edf8fd0978a237638bc1664f09a79cac77","11e6bbc3dae5992c06799eb70f77db853e61b805be65c323e1ff2ce6db3998b4","ff3ac0953ce63ab698ef58eacd191778c2c1bcd64cf9779f57d2ca40044be10a","810886eda93ce34f97556cdf71191d3f3178d01d873cfd117071d647c88d4702","ec79f032c08fea2de521a7794f897a556ed84b17f8ece659b547d74d3137bc36","d5f5465b6d70ec9eb5fa4b73b511305c1b686def0c98a0246e8a4e9838a04a81"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671768867 · entry 108e9186e8c5677ac984…
Expected log hash
bb91227cb78cb3334e4fa0a34a7640fc05bd48061b2bb5126f5713e7d64ceade The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788238642169","kind":"published-quote","locale":"en","page":"brand:swisscom","quote":"Another update. Another frustrating experience.","rating":1,"review_date":"2026-06-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=pl.lsisoftware.bluecinema.prod","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f0c601bc37f5…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.