Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“From previous years' reviews, users have complained about this for a long time.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
48bbc5416a1080cd9f628b0872e319601448faf0f2adc4fecd89a6557bbe0d82
Signature (Ed25519, base64)
md76NPvUAyJfuq8eV+bDYHb9MomMouuw7iL9i8XPCkXForX3UNPb0OIWgWvcr09lGzR1hCHYuVlBDUJ6HtNRDQ==
Merkle root
17ead47648ad229fc265a299c31080897702755719af6ea46a92bd0f863a72f5
Merkle path
["48b555194daa2cc96fe7df5faf5b1610168b052d5a840a1ba356027b337438cf","21c282a9137e64441b2aeb82b789bc879ed7d9a046a1d7d0bb1a5bc89304d324","c91058dbd782d9b46e2050b6b32af030ee293f6e895fe02a860770888d060ab5","6f9ace9b78807689a77f505783b426e80a5fba56b9fe3a8f5b60ac307e0fc9fc","4d1d05f790bffe88be72d3e60570bd7a91b2856166aa0da38b3f64af2230ea6e","c227026abf9bf1a15d6720b8cd6530f1638335673e6231f29192975ae80e3176","2850c70f7c481bcd42289495e4c4fe7193dd75d873c047df104b4d2bf4e49c6d","0e660686a31180718499c343a04eb41386a5dfac83fc896a748ab2b7d1755561","29c1aefd89ce628a83e837c4de87f69771e4d5844f3e9bbc7f21cdd52a358904","335b765d3b63bd60c43dc10b122ad54a76ffc1a60457d052c4d0da13c13f798c","243d1ecddbbff03fb2fc7a95128c2a6fa8b902a9826a54e14e25195137f5653e","90c3547c1efc4d704701fd7d06b4ad2a34d8796f8b4d7775ded3ae69250b03c5","aa3b72ff369b398a0523b5fa837637f50aa62d5c8eb1a52b81176fd21a00124b","61f86e7e32fb75a7c0d054f2c3716920afb9a96763fa26840e5df9515d9f0dbb","60dd9429d44a63e544ca9f093ed5983c0d1f3e76b5c5c255137e28b3e5a7042e"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582676349 · entry 108e9186e8c5677a0952…
Expected log hash
698b150c88f0ec819e6f02a719a6b4a58821d2cb801810f732495f2566d7069b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787631090886","kind":"published-quote","locale":"en","page":"theme:pixum/communication/en","quote":"From previous years' reviews, users have complained about this for a long time.","rating":1,"review_date":"2024-09-05","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (17ead47648ad…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.