Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the app is handy for sending invoices went out and about”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
710bc32570a15107c3da9f51d6e10465cf81bc66c249bf3dd3f9cf91cfee7983
Signature (Ed25519, base64)
amvQjmqTrDY7kC/dY4Uux+228TMOU55ZW7jOgwUzC/hkjB+by1lbQt4HOls8UHB+hDarupZd7P5uDoBb7WyCCg==
Merkle root
9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path
["71012b1bf23e53901de4bc6f3be74b6b4da481932d18d1da66c2ad4a2b36c5fa","ca14bec26f9687f17ca3d005d749b7904c9fcd8b0ada2254731d385016e1c6b0","d9c3f706d542162e3abb93bf2ecbf240cd7f125fa1206f44be3ec2bfadf8ff3d","1529508bd8543d7df79719f88404cf725c8e4a57f36ecd2ee99b2bf7cd8ebfa4","828be713f083e0ca9ed7c8b9bff3a107a5992b742d6af360391188e9300bed09","b34794d7f5b57c82e59c7fe2ad9f910ae019f77161a68a9760562d3377e7c411","ef0e3ed5b2973db11aee66ead181de25fcd6454ed58ef2691554c59cfe22f958","958525c84b5bc6b9a032d33b53a625870152175840943bc8ba1520c610a0b0f1","c62427fcb080edd45e1dff294f947f239b307a1ae276067863ab66d82bf48917","9d217606c5eb63bc8a82a1e4028398bc130f4915c8c99199fe394e54b495872b","1e60a5f7e38047f6270163e7b617f0f816c632d640d32836a7083b56cc04bed2","de57ce495ce1dcef2c90dbc7937bf61413a49247e13455cab064ac817fe68fd3","3fcd45228716805aa85ade4544d04e795bb1399eb7a6a00746dabb625754cd90","07b2decfe383429cb71278f9069f54d1b4f607f991c518b70357c1681514c3ad","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash
a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"theme:xero/quality/en","quote":"the app is handy for sending invoices went out and about","rating":5,"review_date":"2026-08-21","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id441880705?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.