Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Private and pretty secure.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
43450e85c0cc48b066e8c8ce69440907ed91436fe18e8d344ada25c91ad855be
Signature (Ed25519, base64)
bOje09jUQFdWfY8lUtgCWWVRFri+BvKQzaftNE2NCvrMAvs8357efoXPbkw5DT0eCgBx2MhA2EPOD8TdwHXxCg==
Merkle root
199738dc68b66dcf66f6b0cc77e2cba74c3bfda88989684620837b4c4e64818e
Merkle path
["4348116d341facf284727fe14b050bc6667a6eb04f26414f160cfa16110b8d78","c170541a1d5820e9e0d3b101d46dbd7e3ba665612a0a49633f4cfa32a9ae4c85","d555b2721bdf148cfb006141ce7a702ba14cd3d2e66f06977f588e7e991aada9","bc380a867263dfad91b44d826db5f1e56c8dd72658ce282e2d4ffd388fff551f","bd4802bb7cab9ea54fae96a882fb2e688b5645e014411e732a694caa520651ae","74a9dcbf2ddccc380228d171aea2dc6e045db77b2694a5732230a99641965eba","c7417de3ef5a798a26cdad4d824d15dc0d85d24c97bcec562f91b7b2f48f8f08","b2722d82e9f1edae03402e0ef389f61af40d471ed344a5f4e627b5d8feb853e0","d4896ad499a4f6d2ff3ee5aa698b3b5264ab44d1d6c6647091d808eb4b415d1f","bcc89037a49902a3c70b26cf633524ec038892760424a444a7fde7afcd652bb4","4819cbbd871abf60ec554a51473e2bc17ce4d8ef355170e3a704c7ca1cd1c9ef","793a0a113c6896c3097aa5fd875e658514ad3a060dcb3a5d23abdc1b4da18d9b","5dc6942b342fad0953fd3ad3bc002a6e4d6bf8c4ba6db81c1c43744a0d2c9996","ddc8a66e59fc8f0934334cf08e419f621290129e658cbc58d8ec27bafd90b0af"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3198797320 · entry 108e9186e8c5677a14ba…
Expected log hash
46227e67415cdf5b62c43420eb8b7a80b35acaa912410c2711787f678b77c9c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791687727006","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"Private and pretty secure.","rating":5,"review_date":"2026-09-04","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id931370077?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (199738dc68b6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.