Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The competition obviously doesn't need to do this.”
Apple App Store · 1/5 · 2026-04-28

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514750008

Proof data

Record hash (SHA-256): 5cbddcc654c9a310575370b96a9a5629561303234c2076b03ece337d769737d7
Signature (Ed25519, base64): wx8T9NiN/2+LTxSwj4QO4SSnqFh7fh9dfdL0PPgZ6mTXXvfnowco2P/rF2j/EbNGEl1QVfbuijBLmV3XXdIeCg==
Merkle root: 1f4f3b5edaf264bc6a00193653378e6f11cdf7d052ca5b778d915c1c21c7403d
Merkle path: ["5cbae016bc232353f1afe6966e1b55d058104a06e16616c1e07aab709001377b","438e6dd1fe921d853dd071589742493d6318e02871f30e90de1c765456098831","a2d5bc07fd01d85fb94b0a7534cf73cbcba4b47b9607e4294aace2a818db5541","8672f00414de90786c0c5c8e37fef4968617629da8dbfb3d8ea45c4f7ae0438f","9ce33e20772ffbca9268305869e73413b63b4ee86411fab3632ae8b4959b61e1","bf557ee017886b5be64eaa4afa60559093e9dbab0c3dd680eacb2b5898ff4ddb","98bb920b670524e68b02a0f89e761b24fd1999fd4c2632242d2307678e4eb844","873d9c58ed6d4829019649b7ba941ae30e53430760828c72b91c3c21f1adee6e","6b03239e0db68d79783917667a5c85c6d75f91d89a3a8342338322edb84e6aa9","aea1fb9d8215625b7b455dcd5d9fa2ba659f83409ed823a28c33a0114f6a4d43","f6d9c35d14f05e44cd5c2528c5a66b0bbe38d793cb211d4c43c98951dd60b6e5","b252eff7f21a71325f51b8654dd33dd077b4f9daa0df62b3dcc478ae50ff3e13","76943745720428622258b42f01f24f0f87b6c77aa8d2e50bbc39aaf8036c0941","20b25fdd62f3ca5757c7b65a8879088679733fed5432f6a9c311d3d03b993093","354ad39e35fba32f932ca084b3a174e4cb81b7aabf68001f138a9a4088e307bc"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514750008 · entry 108e9186e8c5677a7ac2…
Expected log hash: 72d3f466bc589a4186e04430bc1133fbed10c2c1049384c2fe15c1cad3406981 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787133679631","kind":"published-quote","locale":"en","page":"theme:sunrise/price/en","quote":"The competition obviously doesn't need to do this.","rating":1,"review_date":"2026-04-28","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1f4f3b5edaf2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.