Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the recent update has now made the UI scaling really tiny”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3198797320

Proof data

Record hash (SHA-256)

3abc504e3b9d78323b69adec3187d07e2203bee8824c949160d57bc7f4df76c5

Signature (Ed25519, base64)

tUX8hqhoFJ1XVvcnWg5eNPL0yhD2PojUXo/hxYHEk6fa1y6nqXvD89IxcQrLs7sUlZcyA3uouMS17Y5HYaojDg==

Merkle root

199738dc68b66dcf66f6b0cc77e2cba74c3bfda88989684620837b4c4e64818e

Merkle path

["3ab7555e884e71d064eb939fd3930e983f86d4b9d6d2bb8005c189567548a1f8","40b4f288dbf71c2253e250479e097aa55a445445f6f4e12942ada11bac5fc90f","5dab4581d82198b3ac8b28cfb854d140e4e40d654e0bc9582f336dbc0181d482","0ab58e8b5d47e94901fc9c5ad9ac9e0d7be620c57d66ef6ac620f1ce4383214b","03c2ce5b11fa0cfbabbfbcf82906a48017e6a31da193e03817df6a15acda781d","4846683a0f5e50028462e8767cf460361e13a35d9b43abdcd281d716bf5e6114","2faafd6739bcb662b8cb9bd69c19742cd982866ccae8039dac59ad9d0c6cbcbd","56d42c68cb372356e077624044d087c4001b7fce8ae3b3a3698652ffe0b1fdd2","af5c137bd67fadf1e044394e81fe08260ef85d6c6fbeea680b117fbaa48af0ff","8293318547411a11b30a1a0bba2556bfdc840f7cc646fe10e8d7279258655cda","044d29ea84c64121195ee0232cedf7d4633096d16816562b08b68059aad62a3d","c2efc19050cd51016477281115d61ba0bc460759f5adf7f1bbe5ac7cd5d2bcae","89c2d1ad10f8da8a1ced326bfbd1f55882866fd705571bc337258b3314dad42f","ddc8a66e59fc8f0934334cf08e419f621290129e658cbc58d8ec27bafd90b0af"]

Anchored

2026-10-11

Public log entry

search.sigstore.dev, log index 3198797320 · entry 108e9186e8c5677a14ba…

Expected log hash

46227e67415cdf5b62c43420eb8b7a80b35acaa912410c2711787f678b77c9c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791687727006","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"the recent update has now made the UI scaling really tiny","rating":3,"review_date":"2026-08-03","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id931370077?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (199738dc68b6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.