Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Without the ai. Easy to use”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5963b3be3d684c5df35c47d9b1cd9b3be3ac552171b1f5a235a308b56bd45086
Signature (Ed25519, base64)
YeiyBurW5RiaI4r4+whZFF1rGupfO0EEeYK/0mI4WIRWTE4qrZ77vabxqE5yrkL/M9XvxQstQW+QutVHM+IJCA==
Merkle root
fc0474f2ab9253f8c52a81a0b2f1ae382f5f022f9b54f4e3fe06eadaf19fcf31
Merkle path
["5964625c085b3297acca40764e992383791703cea36648b915876667b12bd95b","4b110e46693d1693805207ae31e4bb67dd026e0fbf9641b5e72b399197e2d737","b943f0f56f667013353e2a9841c994efd666e2254fcb2d47e246e13363e98ccd","e54d009c9aedf9e366a69d06cf710e36053a8f9306d813e309c393eb351e0248","2cb7d0a1fbec50cb9750eef257b4c5274519ace329de55ddf9e52e8f22f2a4b3","75c5263f621f8ed491eabf378f69a9b619065045b84b5f4db561d7a3091619a4","04c0d9a882850071535d84c67e19701c92565fca7bc3613fbad73278e5eb4984","3f22906450a4d9e684423db85b2b50dc5813c1cbe327e99064dc56a81c82ceed","5900c18ffc878990b2b6be1428b8ad68332b2798659c1ba95d7e66b998645290","fec093dca5553dfea3b07f43a837d6faaa5caacc2bcf6e6108ccf4e85b7a42ae","af675a096c17b239ee75d53facd9186d5d40de418deb285dcfdc895e5942aad4","e531843e4fd21799e0773cb52b109c32621fca12bdcd8712c1bfde939f8db0da","3ad04013b7bf468f6ff7931a10fdc87dd52a20a709af771774768220bea6fc5d","d53ce14c8422f7b98c01f3be46add79c44e4551711bc517ba367121540130adc","df2c1289894581f6e22c526afc719be15b70c61ef4fbef0978dff78cc8fc6054"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2544092674 · entry 108e9186e8c5677a1b30…
Expected log hash
e3ca1014bd6a1a766a29da72cd2b9f7f9c6c416fe6af720fafa94eca555dc171 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787289954326","kind":"published-quote","locale":"en","page":"theme:canva/communication/en","quote":"Without the ai. Easy to use","rating":1,"review_date":"2026-08-09","source":"Apple App Store","source_url":"https://apps.apple.com/au/app/id897446215?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fc0474f2ab92…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.