Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Please fix this quickly”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
60d219f41a2544c65f38825c13049e6394b42a179c7043b3d4c7cc02c3367240
Signature (Ed25519, base64)
z6pt3p+gVgje2rXGOpU5QZNT09qBztWMfb6sptrgSZqJE9h/4jhGWNERoZTGKKsHh2KyLrS0APPBDO40+oSqDA==
Merkle root
9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e
Merkle path
["60c401edc856f09f42231014e2c1d71766d1b2c95393e3dad5fd56fc6f364445","7e8d2c3b6344b99c1f41dcd7cc554f2711ba243561f189e5dc86aae647f3c9da","fe34f0f0cc5673bdc658499690afdf8c64a7baabca3a5de09fe134e2f4e71616","f23847f5845ffeb41332d4fc0534785a4b6383acbdccee640d0e6b106eb10434","479803273ef63b1d92c004119dfec733119cdc63aaedfbd1f784a7e3f3d511a3","43290e9c3dbc372124f2fd4507256ec71874ffce23924f798682d6f79eaba82a","f7fbadf7af87b96c4e6b09708b49626bf7c8e8d6bfc906b1e32c120250b8e384","169a375b52512caf6b061cf59c1c05e7ea6e4af8aa405d89a29c6fcee17250e6","1d1280e32a31daf8185ece51b9ff153f26291f2f91613c31ad45ce205edb2bef","aa3c6fd517f2180904a789a43fd1be97921ef805909fdda62443e8d77b20b200","773a095bcbf93445d153fdeca960232c1a4bbd1bced66454901451165c999998","240ffdafbf866f8b77192a54c7124de153d6fa0f12969df359945a7f612fa6c0","eaefccb0e1aa85682b1d5eb0fdeac76007d7f9e97f87d680b9b26b421dc772f5","78e3a01c18db7a3aa85fa160432e1aa22e4b131e9c27c5e2e4566764a2ee13b9","deb69ba818cac6d60ad262ee5febe93ecfd14e4c978778af299f82ef8a69b934"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543154575 · entry 108e9186e8c5677a0eab…
Expected log hash
0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787284115102","kind":"published-quote","locale":"en","page":"theme:sevdesk/communication/en","quote":"Please fix this quickly","rating":1,"review_date":"2026-02-28","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.