Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Deadlines were not met at all”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3c70664b30a115e30bf7c93dcd78c699240051ef5a8c8677f96b6cc7306fe586
Signature (Ed25519, base64)
Hz/PXu2hbLdYSfnYxiJYcvYzGzbM6HU9kueUNUX/ZD3WqSXn7k3vKZJGUxQbQNF+5pA7jIfSBw7tuIEvZul0Dg==
Merkle root
c69b412346f0db8d88aed17dbaf2e4876a3743c1c4d16fb306ba56b5c0573123
Merkle path
["3c6f1118b6a2a4afe1443eada768328424fd88242829c437c2b53908512b4c2c","156373a07793f8ef345e7ffab9e086472bb73c5d9cd77c84471c592f260ab6be","0a35ea818a397f1fc0077bf309f07a4b971bb1b06f00be9cc0019fc98a023d01","d8d611e393f046d291626dd884895e1795f3e63f1e6cb433347781cd5225e9d7","6e6f72b4c992e886abbf992f4dab2898b9e5b1b234fbf683fcda49f81861edb6","9ff5fe236d0cc950da4ef7d1cef528d69146a18471ab758cf07815ed10437e4b","a27fe77d091822c5f3770b746aafd2a697736b4020f74f715bc6d09efa9835a4","9af357d31780963db61c894d25bd58b1f085cbc30ec377e69003e6f4a54f9036","945b509a000e4f4f98041ce46e1da023e4cd610b1cbf467943b4ab78386d8159","5695cf8b45f2487ae21319fe64c336e616d06af1121fce6f9fabcaf170656ebf","fecc9cfda4d079bb6779f94df83adc6c4e19223f60f78f66f39dac19284edef3","6bc505cec9cfa6c65890bf4e5567a5e9c41915dc5198970e3883c998d4888fbc","2902401036646228e991cedada72ba594212cade8227204cfe8c0e390674d7b1","62927e8f71080777dd1935c21221e60b742dc0377a31e2f20a0a64cf6c3282e8","3da38b679e2392986aef224a332d14750fb3a22c4e75287765e8f68f575f24f3"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525010456 · entry 108e9186e8c5677a4287…
Expected log hash
659be4fcc7663b2dc65a53351e16497fea44ed9ec8aef1f3c48c8e452b350dc6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787194832011","kind":"published-quote","locale":"en","page":"theme:relai/delivery/en","quote":"Deadlines were not met at all","rating":1,"review_date":"2025-03-07","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1617564067?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c69b412346f0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.