Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I feel like it wasn’t really long enough”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6e35bd75020d77ed3cf0934aaa40d22b2fc145a9392d9009b23459e9f05828af
Signature (Ed25519, base64)
QnXRsNJN/5bE7dMZGRawJuZcGp+eNNLUc4JRbvIMt5qD6MBX3UravdKl9pXtQMOO9rF8GURSF3LOMZEFZKUrDw==
Merkle root
1f4f3b5edaf264bc6a00193653378e6f11cdf7d052ca5b778d915c1c21c7403d
Merkle path
["6e352a24104464fcb86b2a979a8317fcfec95f1db1600b83b70dad899003a7a8","8e08400744188f87a7e0ae707cecdd8bbbf207351f992e13be88a41b73afbb99","236e3380561f814d5e377f3789036d65a53ce94f8c23becd8313b932b9d53e28","0f2dc469dff9bf75268894c5548dc940864feb9def08cb8af86e1ad4f7a9117b","ca867b404fac1a18119ea67549f482e76504f9aace6a1950d287cd51eac859d4","1502c5d084e14f491f7b3c5893c58d42d528875cb3cd72dc161fef515251ad6b","f1234757311564e3d1ed5597e360f57be24ae2f2763c75e22fb895a840f2a179","f0c9afa37610f7e58801a85d94173dcabc0a63bbb3b5101d17a76d0bd47352a7","5cf9a79445ae0434eb49696d1628797c5921c5a3bc4f5b92d6485d378fa0852e","204e3f967b5746053c22ae26bfeee5b3d8ae248e4b3fbed81610b72a93093e7a","4fbc9071939473acb822f491e80d7ebb9b2f2220a5e9046f19bb48c4ebd9331b","76314edfdf88e7e9b8d1b83120396a0b82e336f95ea9a9f8e107cda76d7f1a75","262a9f81238583e2cd1857070930778ca81e80099af74b7a470c955d877ca1b0","fc5a80f8a33a91194ac04bb68228972904c735c88173cb742b33f0dc7c73d75a","354ad39e35fba32f932ca084b3a174e4cb81b7aabf68001f138a9a4088e307bc"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514750008 · entry 108e9186e8c5677a7ac2…
Expected log hash
72d3f466bc589a4186e04430bc1133fbed10c2c1049384c2fe15c1cad3406981 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787133679631","kind":"published-quote","locale":"en","page":"theme:storytel/durability/en","quote":"I feel like it wasn’t really long enough","rating":4,"review_date":"2025-09-09","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1608097488?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1f4f3b5edaf2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.