Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“support is not helping”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7096881f5231812d7cb2073c3bfa441abc2c1506aa04854d25340008608ef4ef
Signature (Ed25519, base64)
63zcZLnfJhFl7dZ1ekaRxH34vGDy2Rls/RQ3ZQidrKkB9G5arbprDnevNQdg1M4xKKv9YPdRFsOUhiLWxvfRDQ==
Merkle root
ccae92ceb3dcfba104788424188fa34a8cb1410075ff6c1a21fa513e89f0c4fe
Merkle path
["709fe3dab3e9710e91d214266e9240826a644e28e4134c76aff5b28b50bc0fbf","fe3cf1e3036a3424e4767223fd114727b8d79a183655ee54c541ca7afe6441ef","2e9dcb0239fc86408585a35077da2748f62368f7bc5d0b78ff5790ab21d318ea","c860e721d11974c714a99fa983f65525bdd4022667ccfa0378ba20e5e4dfc0e6","fe16237309b96e0afd6d3e0441107be7c269d3ed121608f0aa9c4cabe8e4eb7f","a5af6861ff5cbbcbd80147d3352174cfa88d40f0105331106fafd22b7a724cf2","7cdf9cb3ab2a3fb241536ae7cbe176bec60f9dada233ca5b56ee24c1addb81bf","d674a7e8d31155340abefb0afd6010f489b0c574cde5a4301a9280887aecbd9a","cdf47fec13d61bbcae348a3d2c2fc6cdf718addf5c89851b08b459749edd2e27","368b6576e836fdbd94466b3dca2880a4c48a3ce36ec303319d0424f23aa0a491","4355063a540d6fabedb73d8b64280f0d2f84e0214d43185ab2e997d2fcd3fbaf","34cac883526e693549080af2663a642191eb446b9634aa864485beeaf771fe87","e472864955793aaa2d19219057558dc2b6f5214abf252963626c32870bd50cf3","35f1bb6574fe343de1c8512e58fe7937cd8ac075d63d989ecbfbabdbaf4d6344","f73291c2ca924ce4b3764e4b6ff1da65a701069f04fad47c52c8b693a0ec7e41"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515282333 · entry 108e9186e8c5677a6652…
Expected log hash
af455e73500113c158c8df9793eab703ff863c9c98fe38560752c9a1772810a8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787139531268","kind":"published-quote","locale":"de","page":"theme:storytel/service/de","quote":"support is not helping","rating":1,"review_date":"2025-10-10","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id348177651?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ccae92ceb3dc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.