Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The web portal claims you need to open a time-line in the app to start any treatment.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3a13c734eb4e81d371afe558e8e9ef4dd46ef16391d61f72f7ab2eb6245bf683
Signature (Ed25519, base64)
i1dUiTMQipwxavbotVnVchneTgt4Th8CWN37PGOFVNb2Nvn7s+OFjn+f1C7pqxYcaCGBwCdVWxtYh8D9wWwAAg==
Merkle root
23708832e8b82fb19ed546d32769e3b420c1d586f3597c57fbe21b38aa3d2967
Merkle path
["3a1281e46efe5d117a4b58dd5740bfafd202fc1cd43a265303f54160d5377301","2a248958117a20a77114c4d3ebfdec35e375dc614546f6ee2b932dc5f800d336","941229f17dea780bd4f4cc6e55b5ce63548b885f432151244029c13707ee96b3","03c960d9cf52cc2bd1a90eeffb36e31aba3970d79f6256b9bab39d2d39ceef59","547d4e56ad780e10587ec5f82f66426559075d785611a6eb1beab2dda33e20d5","d6eb75b1989e16c936221695f002f6c2e87dc86396bced1c3905d5da31ecfa72","8bca5e960548a7496edae55fbe9b8869ce1c96b6b4b3c668444e8b81d0a88ccc","10195e895483bbaeebddd522f62c19a3b30b82aae1fb2e232fbdcca35b9d0c8b","92d386d3109cb645c57b33d3d5099c905f30f43983f966dce490c359dbca8c97","05d4daa1896b19041853bdbe3e0a2e2fd84c28a571fd7f097b75d340ff9857e8","4fb28a561444c72bd5ce0dd90648bb0775921796e48072ff41a634bd7cd4245c","a9c0ae128fc259435a09ccbd2bdcee9a0d279cb352d5123012e3715e62d41249","8ba301171f33fc4be3af913ca22ad55958ce1349ae715a5e94a43676706a9c02","8f33faaa07ad5ea07efeb917f280edf1402ccf36ac9ce99ebbc19b8a3755ed98","15329b26f5dd0eec881ba05455c1331c6ef72dbe3b2411079c28929287675737"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647607423 · entry 108e9186e8c5677a4592…
Expected log hash
0f6ee04fd6fddd2300fedff496e92d61a9d4696f180bee82b8a815cdce3bb3d6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788065315450","kind":"published-quote","locale":"en","page":"brand:css","quote":"The web portal claims you need to open a time-line in the app to start any treatment.","rating":2,"review_date":"2025-12-09","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1133551270?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (23708832e8b8…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.