Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Really bad support”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3f701627387fd777471b55f50f40ccb864c470dbf30f3d7476f0a63bf43325eb
Signature (Ed25519, base64)
3Zp346u4wHMzfnC5sSZ2WjQhqzmx55VXYsUGgvr3B76Sw0mB+a3vo3HFLiPBJqJckJXBOF02Dp/+3Y0/jWJTCQ==
Merkle root
a4d47c2a34f6eeba31e2744fb1551fe9a0e34820dfc152f1ad93a68b24759c3a
Merkle path
["3f7a67c3eba07b279eb339767c0b5c2c2b8f11c756da815b249d2ec5ef9d569e","d20f6ac93f643ff1ba03ea57c9402ef592b804e1986869d915d20507bbcf843e","df9bb58c81488e7b56d53d29886cc9ed6b14bfad886845d1ab7b104673f97371","8a90e1c3910a83d1872bdc2bde317568f02a8bdca6a79fd91bc7bb3fde1705c5","faf2db1766d50b3fb02cfbedb9159e8d78893460d2bb74659fa5c232a923c941","6bef373d70bd94ef095486a383ed6080a431f3d51f78df1d9489071a71d83fb1","184f3d6be70a8242be270c37adc7c92426b2bc7497ab4b31a40bdf4797c21cc4","52bbd53bd46f5aebea6bd9c74e253302dbdde5462c51b9646c662f61b4adb060","30a2e5c204185b17f3f2acd8860ae57bcc30be491dc68fd014361c8d16d50290","ea169aeba317f4bfa07d1e583c5d023787b42f31ab973ab9df27cf77e23de7ef","0aadceef0f0d856f742d189406dbaa3aa5c755ebe9fec69552e8b54169d5a407","349e15569e0a1f4fe3a9d16d01f014e54bef7124bbf1f14bdc15063bbedc0e8a","0d7c4faad4992f205f2c1ebb2b0e4b1b7e9d070f1f77d3f8d64b80626c324f46","35108299fffbb5c1a0d86f074b5805457d73da5ec7c848a19bc9a928f6a42a99"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3272274666 · entry 108e9186e8c5677a2724…
Expected log hash
d56e71820b4c8c62b755e9f6e3d2b624566d12db6dd1606e99ef55749400c387 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792036997995","kind":"published-quote","locale":"de","page":"brand:everand","quote":"Really bad support","rating":1,"review_date":"2026-09-13","source":"Apple App Store","source_url":"https://apps.apple.com/ro/app/id542557212?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a4d47c2a34f6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.