Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“no notice was sent to subscribers email about the change in geo disapproval”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
64991349bbdb84be611e071ea3376d75d13f5fe900ca0e5affb2317f142f7cf0
Signature (Ed25519, base64)
te3PCGUlsGJh1KZOE+1sTS9zT6jDxA8CJXeSh1KpAdVq1Y2up79Qg/iYmtHKBJ1bjNKDs3eAYWST9r5+TqTuAg==
Merkle root
0b0c0499033d3f9b3953d31e6c838f88f12988dba810dd4de44922e1b60fcdf6
Merkle path
["64a38e96d5781cd3b3414283dbbaa3a3af160e3b66af869931646ff709f93098","01c5b1553cdfd09263aa432ea54bf5a3cf70d18651cd9b4d6a10c6e9120975f7","c6dd282bd63ad51429d2eabae889088fc5b144a3e8dc68adff8ae5422a66133b","8a1cb10949ab7eddf1b33adeb9892ea7c32274189e34b5b4d193a94b91c898ef","ce1a482765f0aff9f59c9649c66dcd56e41c8195cd09f72bfb78aef58371ba96","f865d4c9758b87437727189bd172dc03f4492cf9b1cd21677fd94323485bea16","6bf5b6b3871dda1cd04d642aded2c00f23299b7e76b18dfa1eb366cee037afab","4dfdbe07502a84dcb078ae01ed2ae41d39db96bd603201bb38780550d660d224","ad8535c020d637838a8b9ce7d90585277cb20450cc51ac7859afefdcc05513cc","b86d4fc06276637ca79b899cc9674a06e9be300c1ce6acbdecba9e2251a477dd","13b599c812157d9076d6af0bfb40dcb9d2ad5fe72ab77a105d80fb5b5302d4e2","528c35f15621ebb3c69940ce109a5c8c9deedd3c3a55b6de2dd07ee18ed0f3ab","ce3bd05c1f2f9033fd6c6a10d6aa598ef7f4ebabac7b91f2b7fdb7ce77a88272","8a05b9e19287b30c7fb54816a1fb848939f3f2c84b9825f19f342683d5db13aa"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3241084060 · entry 108e9186e8c5677a3e82…
Expected log hash
a291e2473f1a4510a666e020d4d424e463d55bf4677b91eb5a52e446e5ff1581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791865115768","kind":"published-quote","locale":"en","page":"theme:everand/communication/en","quote":"no notice was sent to subscribers email about the change in geo disapproval","rating":3,"review_date":"2026-08-01","source":"Apple App Store","source_url":"https://apps.apple.com/it/app/id542557212?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0b0c0499033d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.