Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Bring UX expertise in-house and let them help.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4867c581ce68f7d401c6b969d41bc6ecaba249ad2f659bf6f11805624dd56287
Signature (Ed25519, base64)
bb01WVNdV7owF2jFXfjeb9lWtxOOmj+Y30i3K+eGVdfkWz6PSDg0b7VX0K6NJCUWata46eO8nfPLU0BvOsNlDA==
Merkle root
f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7
Merkle path
["48692facb9dc62dae93b3708949123c3f09c7606577ebb3455e8583a7ab33e38","cf7e3c863b24cf6e36f50ac63a25f54da52619f33eaad17ec768a8b62a605f35","8be48d29813bf6b65c6269c22088ea33ee2864da248253406641af7f830c372f","48e3b03115bcd6cd0e7c66a86347fef5c0122b506da066249e1067d782942b4a","3ecb1c8bd63324826140d955898ff43e27355d0d9916b0d9e4a2c8531cc5e73f","befc0925e21cfb599836a524ce4b3bb0cb31fd6afe32a4d7c70a9a36bd10e73a","e89b10371581a5db1e94bfc7066eeb68f8d135f53ab86e91df1f3de7aea3725a","ab5a3b61c0bcb147dd158382ad2f9c656f96fd0dca906c391315e230644707d9","9d8846a5ad7d6bcd9ac15963d8c5e31f8f0bad5fd489d52f2895a926d2a5d878","c88bd12a21b1ce21e3f508a7c2413fc4aa0cce92775e5a7a4ed1dd2a631d25c9","18fb7c674f9fd8a603f7d93b9e4594018f1a2e18b726be28aa375f83f1b6a6a9","cb6f5361d0bdfc2f067bec39754c3cc2773873266c01703278fd62fdd7b9208e","46c87f9a08f1f246fdfec5275340122c6fc82f05348c2147438d88f4190e91a4","2e5c89ae9ab7dbc565d9c1cf67eadb6709ebdf774f99038c61564ed1fae236de","e9f01260bd0385751f2505473f49304ca5856588aee517e499b7a694c94e66cd"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…
Expected log hash
083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791172602574","kind":"published-quote","locale":"en","page":"theme:pixum/communication/en","quote":"Bring UX expertise in-house and let them help.","rating":1,"review_date":"2025-04-25","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.