Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I cannot figure out how to fill.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6a7e77d3a9ce83b14d45cb9b37a927f6b3e050d6aed743ca3e9d97ec63ff24bc
Signature (Ed25519, base64)
ebDbVl3LHBTBPkeyIpuDoKNhx0dJ7ihAub0NZ1scwXST+RE/FXK3YMJuDOX/uulz2sbaUwz5VyfXc4QUY+nkBg==
Merkle root
1154a265a990612db5567445e00872656e7ced32aff0b18660887a40a375699b
Merkle path
["6a80332a5e95b5f102dfb9d4e8708cf5277f5656cb103d6cb3a5c561bde126b2","06becfb14b671caad5d9b7587e4f90580b6dc0943a057079c1268aea07c531b3","a98664246f4943da10f1f48f1f6a2ae8a3bfc2761e2102abb70729318e75c3b3","e432aff35f0a924c30b8cc879130a1592c7eeae799c3fb4db6282adff1251931","d5237f8a89f8649aa5d267ed7a93f5070d568cbe7eaf05b6b952727881a86a44","6a97db9b6b7fb87d6eaa4861b6951d2658a68c2fc87b3ef08f460319de3f8e87","7c85f8f7395ab0911b7e29ed9fb2d73b5de083dd9263970b1705a658205ffc9a","7cb02c18f6521103c37062288bd937cec069c4795435e099ee0a88251a7131f6","06f3161a9808d742b5a2cc10c09eb378cd44c7ccda28c517c6ec17ff8dcabcc1","9fb81c38f924844be2f4bcdeba34ea1ca2f6c54a011b62366176137d3f091b67","450ad7508bbb470cd2e76742f0ff251c897f535469b6e6f0481ed7e8d06b6d00","8ea4b812a510f86d597b02a5c2a5c372cc7c87c60caf3660f13038a7f04f0b49","7b43375efa91b25bb70837c8d1e426ce38032262734dff0ff0d3f14b97b752f6","602297dc52019bf7e809df446e2304ee5209e9b092e15c29026ad3b8e527c6fc","8f93c563d7c563da751df1a0efbe13b6ce9bd7032eb6dd0a995c545aff2f5a1d"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524110285 · entry 108e9186e8c5677a87bd…
Expected log hash
34efb4ec1aab60168b83ec62d0334b8e10d9814c0de0cc0d3569d176ff20bc2d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787152786156","kind":"published-quote","locale":"en","page":"theme:acrobat/ordering/en","quote":"I cannot figure out how to fill.","rating":1,"review_date":"2026-08-07","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1154a265a990…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.