Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app has no such functionality.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3a4a697fafea6bf2a393f68d538f64fad3038aacac5ea2d8f0cae118334a2754
Signature (Ed25519, base64)
Te1M860PeU1eFCalTUDfwg/qmBmB7WfzhQe4hp99OHidTC6im0nDjKklDX1XvpZ4B+S6k2P7MbLx6UP5xBuTAA==
Merkle root
6471d9991f0d0aacdf442d5cfa660f2886071005e4c3d26a992a3bf38f0a7695
Merkle path
["3a4ed7bed5b20af79e05ec2d4deabcf65c251807724923bb29d1a6f039314440","bcfad7c90026e6b8269a02c7a14f2e815d57363fa3723ef3db8d47ea60856087","72dbf2d5b7e5070784b1a6bd697afb0203faf324937d55507c8bf11a6153b7e8","8d010d046bce928ca8d76da372c7c8fe534fb5ca956e631809e30321cbc195ed","7dec9c5a4a31ebcfd7a9f22837a385e412a4299f49b2560a490f7d6549b3f5fa","76d963ea100264252e9c21078499c9341f2df0fc5875055439f05d07c5ac6b6c","f049a4cbb43ea6b9c705da4d6a5aaf68beec21685b8821635e545b290f113586","2588d4ed0dcb66e3dbae2418c780d472ae176f4a134e1004c688bd3e80b94633","7721172c2026cba3ef191f669a2c12cc2622bf109c421df8481f5876fecea7d5","ee6672540490f5b51a761f7ecfe5d395b47d756ee459fa39f9d480fa92330130","420ea241eb03e2f96a9eddace9d1077aca64026fb954130aa0fe716cf507d31b","05efb4a36b92f3a267471c290206c4a51b3cc5f0a72f354d3cfb5a72abab87fe","5a0e69397b2eb4b9987b67d90cedd1882466de1efd1f915808f63dc2c4692676","930b7277e2ba0f1d182f8e7d0daf885f1526e50b29d8791024858ea5581e285b","a2fa997090d23b1f352d383369eee4da3a6661cb0956969a3a99ec5f82390d95"]
Anchored
2026-08-28
Public log entry
search.sigstore.dev, log index 2621523249 · entry 108e9186e8c5677ad576…
Expected log hash
644ce1c7a13e9edd388468f8e29bb74f49a15185930851951709e16eaf23744b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787888369667","kind":"published-quote","locale":"en","page":"brand:css","quote":"The app has no such functionality.","rating":2,"review_date":"2025-12-09","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1133551270?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6471d9991f0d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.