Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“where you can go into the document add or delete text”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
64dd88f522ef1ba9551678a60aad913e52ed844b12a4146d97dfacef199f28cd
Signature (Ed25519, base64)
t162Krkwc+jZWKER+8CY6Mnaa/hMIaFd38DfXNHwlswUWZpEsJnqXaAHqA/MPoJXA0dFTPAlOxufXSTQuvimDA==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["64daccc5a7bb37339f54c80a1a735e21383ea40ea8f807fdac1eb2c4cf84b8f0","98bc25a0d6c454ad11fa0e6ad343919a8f9a5343a8d902a8908bf418312f7328","eb244a46ea2e43e247c1cdb7da0caf824089e473afe984d0f05ecc51faad8b8e","47684115b6f5b8b095460cf0980494a0fc3abc1aff146440765f33e879dfb3c4","8a4aed429bd4127e3eb681d7f0b77ce3230e22a33092acacaa069c05282e588e","85165b5c10b34e64175cbb15826abc7ffe91e66f3acc2a852c0e60e7f2077900","b63f71116b1986a56714dc71aa009778e778f5c0675b2845bc2bc46bead8ba93","1e4afe1433275be3a3e961faaa40ad01bcedb3089ab9635599833bc950e35ca4","3fed4f23e97dbc6e4ab27c4e3064e030130dcbe0b3c62dcf599ca25edafc8a1d","d21a8577cddb450b41d5b2d6729858848a6922fb114c328a3a953adbd1756932","032be7307d5db4b79cb5329f9b3de2ef3a6e3543bd6b235f36cca22303365eae","f44be1811ff0bb195f5fdef3c493187d1dd9ac5bcbedba4371f021a93bcc8365","b8686ad1f3c76af9372c49f04594bb5fe4d826cc036a375eba0c663f521c54c8","ac4c7c6db85c9df99401fda1075a3bd42dea9188ac58b0911e04bce8752d56c6","78eca2193b177c5ad7546ff5d365dd6cb79efa278dddff5151740888f319c0e5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"en","page":"theme:acrobat/fit/en","quote":"where you can go into the document add or delete text","rating":4,"review_date":"2026-08-06","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.