Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Dragging my computer to clients every time just to use a functional tool is unfortunately out of the question for me.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
44bef8890c1cc5593cb51cde69b7d3cf22e9269bcc2bd0303967f7fea498c866
Signature (Ed25519, base64)
6CLJ9ijMtTnXlKEe4qX9IN/hsP7qtaZK8zUyQpTuAs9cyYJF5RoQwVCGWPUxHwfEcH1w/nxk//7HPDa0VkadCQ==
Merkle root
cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path
["44bf4072c3063cb6b7c965ab88ac3cfdb44b6b5982ab890b56c39ef4d9839316","ae899cadf6676c26e4623e91c42419ad710a5b380e86c00259605678dee5b572","d7e3538090d1864162748bf230f9932f71296945157ebc9155dfc215b59278ba","a912d923acf5e7b9d76893e7f90fae48351ddcce1d33a51974eebdc5b7dfe759","ccacafd703ac7438de35cefdb11a74c2412dc85a43c99a7c84b2757811d98254","00179e7da1fc3b20015bacecd4359ae4bf4ab850fde21a599c09c77d0c17d539","e4132d1bd1a2022c7db3cc66daae275227629fc6f67a1fe17913584bdb1f1fb4","47561d9dd884f8785af4f252d2d7862eb74282aef7053373a5ea11baa0b4c600","c13295f207db7ab7ab77e4f36a521d93293736c5767a921c36a0a29689e864cc","2b8eb9db006f7648cd4967bc5f7f588abc2e9a61f42166f1943fb8d8137cd977","0a936570b82ce4729e73571d06657d4ce4a5b7fedb1fe6b41529a650c398362b","40fa417b4d18b6ccf75b0d8e5897525c82ddc54545fbb4e1fcfb84aa22c7898a","d2a0d95049b010a02dac5bc62f9c8cdbc0aab414d57731175348e6bac7bfc76e","0f351cde6b1d9915cc0e417c0e2f1f0e3b04741e1975a4ad546a8eefeb399e09","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash
8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787281943761","kind":"published-quote","locale":"en","page":"theme:sevdesk/fit/en","quote":"Dragging my computer to clients every time just to use a functional tool is unfortunately out of the question for me.","rating":1,"review_date":"2025-06-14","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.