Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sniff is adorable, Snufkin is cool, and Moominmamma is gentle.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
61406a57e53450825a30edc9a27030c81904668c679cef978172ea016d46415b
Signature (Ed25519, base64)
5Y55Gn4ICifgNfbiqMWkj8HerJTLZ3NRXCRhQJcG1qtoEcoIWNpk5hiNg8Wr3/6ojBKfrmPE2P4PMJbdXqbyCw==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["614394051018ecc15b1dfb099829cfe9ea15b9b5740a4ada12ede04274ad9837","f2638e891ac297c067dc9758fa68c6bece87670e4886d3f1dffac4b2586aa03d","0c43f3fb90bd43271bb257d2370ca663ce70b37f5a0ad2324f64e9dd0478471c","c9f413492ee57c97cbfd004b92313f9912ad928afea3167360df8482b5529412","f855761482d3b33fefd433cba8f5554565f310634ccb62ee3731aac95c525055","e1b78ca66a8566e9f53778f5b04dc168777ca4aac78da571ef13a0b668a95940","b4ed98255a1298005ac5f19f33c73140bac91d8ba9517feae1c924ce5a746326","38eae3e967ec47f3719ef6383c1140b277ab3898ae21f8b73c1141f63b1a85f3","b2a895e914e6d74d661b2ecc4ec2a2e9d215db48566d5913a8376babab58b2c8","d21a8577cddb450b41d5b2d6729858848a6922fb114c328a3a953adbd1756932","032be7307d5db4b79cb5329f9b3de2ef3a6e3543bd6b235f36cca22303365eae","f44be1811ff0bb195f5fdef3c493187d1dd9ac5bcbedba4371f021a93bcc8365","b8686ad1f3c76af9372c49f04594bb5fe4d826cc036a375eba0c663f521c54c8","ac4c7c6db85c9df99401fda1075a3bd42dea9188ac58b0911e04bce8752d56c6","78eca2193b177c5ad7546ff5d365dd6cb79efa278dddff5151740888f319c0e5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"en","page":"theme:audible/material/en","quote":"Sniff is adorable, Snufkin is cool, and Moominmamma is gentle.","rating":5,"review_date":"2026-03-21","source":"Apple App Store","source_url":"https://apps.apple.com/jp/app/id379693831?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.