Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it works smoothly everywhere”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6d17cc4c4720b0344b97b8dc62725733177a7dbe201e38a2c40c97ae00eb7f90
Signature (Ed25519, base64)
t8arBSL7+fLtP5o5LgfsLS1rZdyHdYzmp2qa1uCliaHSIh/nMw5ytg8qapfPovSvsbsHPSjE5GUvNr/AK9kYDw==
Merkle root
49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path
["6d1a64d59a4c05084bb40814528b9dbc06f4435279256cff1808225c6a88970e","921001b16386e2347295ad72b08e5eda9fa629f5d6361026486dd9391e63538e","2d3b12e77b342940c659db13737a2b684f88ee795ca3f72572fc9ce215fb7673","2520650ebdc638262da3f7d933efb58e960ca415fb87e6c78d0276b19c5368a7","8dd75fd46b7c4abb0d1c35f972a862e2e0e7fe60bb765e56a4f26ba4da5f99ab","7034b3966b1259f0a43c83c0aa13d857721bfa14868b1bba30ca542a37b0d81b","1e14515d6198422f13cb13a926fd3f3af7285ee06ad04e79c629fa711000183b","10b06f22ef7284df17ad850fa224e918a2a632c14e558d3f71b72b47375c2747","f15984d0559420c01a86e6d27f935713ece7143de77b7ed66cc556723649e94b","e0cf7ac9b5f4cd7a319eba04e872bb626543b2a1276f244382be703ecd9a37ed","41fe15705508c096284e9525ebc8601891c1bca6a216e6bae61a50bb3c21b7a3","79b266fef4387a3eb13229ded49c020294637e97bbdb14afb5838386f7a6d53e","111d2d0cd89c2d53981ba81e6a10a0e3f8f1be927d4be6d99e4f29e2d9c3ae52","541a456de48928931fac4c28e56562983bd2f8cd0c9306116286df2e2f1c9422","d81f506ca96dea712a8b56759200b270fc625cf496d323ded3475eaafeb2d916"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash
d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791428432986","kind":"published-quote","locale":"en","page":"theme:roboform/quality/en","quote":"it works smoothly everywhere","rating":5,"review_date":"2026-08-20","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id331787573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.