Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It stopped working”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4c49bffdc0e2bd4f727fe89d6d8d4e5d30f8e3ab7e646a4848cc4a539c2770a5
Signature (Ed25519, base64)
rU0VGFShDhSlYT62sTiBR5M6/MIXgvDAGlJCAkigscByFi6Z+FDp2fRgiryA2f4Q8PfFN091vz1ipwMIXr/XDg==
Merkle root
4dc0bd79ba3e9442f7f1feb21f347e2f6fdbc72e99098aa5164776a6202654a8
Merkle path
["4c4b45dfff0eaabd13c6857a3ae3d218df9e312cd9c7a31aa2b39b7a8b6815f4","06ccdb8e515df99ad84d316a061ce95f7faedab8d5445e8f5bf6610eae6e24fd","528f7a1fcc21420fa77b74257610b71a937e02ae168e2ffe562ff9a25c6fff90","2cf0d12aebe90e019035b65d7c5c4830a7bea97c3666eff60775ed00584a2a7f","3b8a9e6eb45eed00ff574a6c31f1e0eb0446069bb1af2ca784ba7cb38542a18d","cf5763874b50aff767233c251cf26cb02b611f07fa61d485e68f8e19f3b3a3dc","d771741c8754279f9553eea460613cb11ff6a6783b7ac5b1fc49a88694b576a3","2f19ea0b264d9c92c1ca773e4caf83c1b2f7b5a0d36d38dcf17a607ba24fea75","210473d23bd4d17f26012841b559bdc778c3c62bb514217bd9da1baacce5d697","395e46757ae71477500b2816c7a2c741a01c9cedd411c4f55b24a4422395a908","7d6244f57392b638747b8dfa4f19607d93ceaeba3d74599f1922e855b847d8ea","5db6d47c594533280883338cc5dbafe319fd04677875292608d75d9596fea1f8","aafc4d7abd1fbd48f01758db3e1a1278331dd8c09b348c20be15802d81136ee9","72f96e42060ae616ed33b8fd6ac687c1899623eaa8a351026bf33e2e7a041d34","e60c2274998b06992577796b6abe86bec144203fe960878f7951a3ae12c9e532"]
Anchored
2026-09-10
Public log entry
search.sigstore.dev, log index 2776103867 · entry 108e9186e8c5677acd4f…
Expected log hash
2498329b7eaf275d309293dfbac35d05dfb8a55c65956add8448561c05945f28 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788848066028","kind":"published-quote","locale":"en","page":"theme:roboform/durability/en","quote":"It stopped working","rating":1,"review_date":"2025-12-07","source":"Apple App Store","source_url":"https://apps.apple.com/ar/app/id331787573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4dc0bd79ba3e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.