Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app claims to have coupons, but it never does.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
61d548f7dd0c7b391a24173c894e7376c8200d04f917ac1a2b092d840c5f2bce
Signature (Ed25519, base64)
xezGOdvBBu8P8v+GaMCU4ofr5y7tKoWnNztJj2r9NwJ/xq/06MgKzmC7xE70l8qwuJpx7v8eOTshy5Lb4bScBA==
Merkle root
04b39eaa56e1cf8f75dc8eac18bf6942167c8418ea731a7471223f0be60e3e6c
Merkle path
["61d419d8efbba5d0f372211bc10c02220d459bd181e1cbe9ae74e5a5f8c22700","56b967ddd99fd5dc25e05b8aab142f89326773a66625648c3dfe7a89c24710b3","9caf66c8efa0da0ce610bee90d75214f6fbaad592c9c5b562fe0bb186653cdb3","8ca6e7cae54d111434f6fc803a7a0e0c211b2e46285a1f8b7cf25c72ae564ced","40980dd0b27e42d56f7a74fe99df5602e7c8ce18b30b301be5d76b21a30b9665","5c980b0bbfd8d3b6735c5c782cba895cf49cec0487aa12a8e3565c076a7981c1","9fa556d6472c3a1e848739084815e32baa325ea09920ddeb5c4f915b1bad6a20","c567a9792197e915198b5123581b01cd49ee35227ea9bd25a1e71123a7fde969","c6038c129cf6613b2edda298a864e1fcf783e4c833bfd2b694aecad5ca3f344d","6cc12a036101c20cd643b9471e0df06c2232b1b6783dbc82a3d06a1ed30a8d74","504bb4050205a017b1da047f6b11e9dd91e41ea504f863b5c291a062054dfa35","d1b808c246331cf9fee16cac2b6a958f43763c14ead7b37f7be7d0d036915e1d","858da9c5e5c810f227c1c3047d0873181b65380781d4a4eb884968faf30fbb8e","c5cc7ab668acd70733708092004f0624164aaac2bfd55cacefad6637b26146b8","695aed3f647000e14ed985f8c4d6045987ffb913dd12c814d6f9a495d4d25fd3"]
Anchored
2026-09-19
Public log entry
search.sigstore.dev, log index 2890214870 · entry 108e9186e8c5677af53b…
Expected log hash
1f3acef0f063246e051bf412e40f4279cb96ed334ff7b0647a13320c1b31c4fa The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789722569406","kind":"published-quote","locale":"en","page":"subtheme:quero-delivery/price/few-promotions/en","quote":"The app claims to have coupons, but it never does.","rating":3,"review_date":"2025-04-15","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id1357804341?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (04b39eaa56e1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.