Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It went blank after I hit continue.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4e1cf2c9921b0ecab2aff1213e97109ad0169be36d8418620b469fa9b81aec79
Signature (Ed25519, base64)
w6S2K6PKFfm2qg8RrpDDBvDvL+5QptIyoWwfxFLjkZO5v6RzRTO45tIIW4EF+zCHzmX8BLg8cnObqA+vAvufCg==
Merkle root
1b0b408c7cf60721bf3cca50f4b7f268b0858a42fba11906e486c6694252cb22
Merkle path
["4e1d4c7515cb20f57c9842716f1fe3b197f0952996473c882326001acdbad3be","6a0667a6159e585d3ef1b0be92dd4c43e5daffa4436b6452b95d90c51f35d2a0","36b095bec2f6423c14ff2ab4f539561477a6d4a86a774bd906c729b881e52b5b","b10ebf1608310810ed774c8e7f1db0ae994d47d5130c728514b992a744685036","aa0684c8d38b32b5e9f0c278f68b9a09137b326293e549592b32eadd2142b37f","41bf8a9d0b5b4cde88f5ac8cb1c65adc4b5fa19bdcc701c778b782963e3fc772","013d933943985b803523fb43de65b9dc78b388dadc645467af7d0e5f37fae87f","d00938c11a45f892eee6b2eb27619539b0e636ae0e7b144ccc05f97b1a807198","5312297f0767e3845880a3acef739c1d98ae2b842c87e2f0e6938748b9a997f8","c29ebf7cd77050ea1ec26b3571d03df5ce670b85430cd288a957493f195de050","e17d8e9ff94efe92b55c6dd5f917ff12be0cdde94f4a34cd1badcff751846bb5","cf447dfb6dce6b5d81ae8302a2a58a74ffebf3f56c78349476d09cc10653e60d","a35aaf4615d6d52528c83ebb3bc75a27f09df1b160bd5ce58f5b6dfb09d28482","8547750c311d384cbb1a945300d6b6fb4f4bd2b78af7177366b3baa4b4c1e724"]
Anchored
2026-10-12
Public log entry
search.sigstore.dev, log index 3220996539 · entry 108e9186e8c5677add5d…
Expected log hash
00694de1434e648cba57bf07fb439ed90ba501083441667555bcf619bf5edce8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791779426071","kind":"published-quote","locale":"en","page":"brand:vaia","quote":"It went blank after I hit continue.","rating":5,"review_date":"2026-09-27","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1439949520?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b0b408c7cf6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.