Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It manages to frustrate the user quite a bit.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3a3a1980c8a09b1eb1667c7e40e3c0bed8b2146c2296970a6238d7f0f64c57f4
Signature (Ed25519, base64)
kZNz45H/29nyItkJodVmhwQrqUMsJYZnfrr1FephlPYu02OoUP+CHOTWaubQS5NRMWr3v/x4Yfor+nsQBZVQAA==
Merkle root
b046f5df2a406d6c32d4f87e14105e0107f6e314c3d6063465b8c6441189c891
Merkle path
["3a3960a2d73e7b105a5e8fd064efc002f7fe271dd7f2485af891f66c760707f3","4cc3ca120f8dce2ce799f7bb1eaf42e8b5e0117ce4ed173b20bf2c0293a0228f","b937ac311f63f84e46d0454d4a19730345a0558e3a2606c055ff7e281a12dda4","806bf97698814e0b9da7246a23bc9513cf48a7b4ca75a812d745ea78bed769bf","ce628d4b1b40651fcb23e3d9129f88fa554bee98a57b0a5480ce6d9e5138f59f","e7c4b7963b52daa617b2d1e585c48e4a644041cb5e2906ba204670eba45fc7d0","3df0c9da44cf6cae3f30053a95d0c5b536788a854b4b8e7a538fd4f37d1dbd1a","e3e3ad509ce74fa602f746b0ec252c05758aeca1df463b109a4ead822263a5a6","f112c2f3c090790d067d08cdc05f924c7b0d3987298e4a08b9cdd28efff52917","eb5ad56cfd8371bfd50017421a195e3f9fd4282680fa9462a596e3331fd5c4ff","90b4e6e161646d3d5e3408c5a560360da0f61c8cdb35cf08cf939614c07153bb","4f18bf43c85b8d2286bdee4aee39a71abcd93e3846124d63824418bc43bd531f","12805a52a88525d025e846de23033eec3c52175c617793390c5a390d6e9ae8fc","c35362d8be7493456726dffb35f813b4e10ace25b8e2c3679505eceb5d9a7bb4","4a4ef39d7ab636950ca6d9b7d70c958b0ba84299c7f375e0932c9308990ba8e0"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2593501033 · entry 108e9186e8c5677a6e5c…
Expected log hash
804ea852a1c1b02b8c86a35cc42390aabed87fd2aa29b8fb9f7f25e79321f581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787709693011","kind":"published-quote","locale":"en","page":"brand:css","quote":"It manages to frustrate the user quite a bit.","rating":2,"review_date":"2025-12-09","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1133551270?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b046f5df2a40…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.