Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it sure made me more organized because of its ease of use.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7137c8466d3e65545b0daf1f46f523ae5770ab48eda5719b870a5e96387489a4
Signature (Ed25519, base64)
s5owDmFwzEDkIKgPQLiLIsywFQE5HMd2elU0suYrBS5eKFYRE79BppWnidBi8p4w543BIYOlHBnlktPH5OzHCA==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["7134e3a2a9b669f5acfd08231b614ac732ba4aa5994785fadb2568391e41d158","af705d5e6b9e3d3d432004280a7a32b382e7e9a0c8a04a812cc09f59d2761ca1","13b910a4ccf4bc654be467ea0a374c8a061998aea6ba29484b25df24d468df25","8bc25e9c03812d24cf6194b5e5b5bcb99faa30b10eb69288170363e493f8b02a","bd82f39693bd2a6c2c36234d52c49f67be5ec11e505773780b915cc6b2c79ca5","642752733e2eb9383664ba4508552f48cc343839910f22fe1b108622d5faee0b","85e6acbbd11bd5b780260416a96c4154b4915db381565c86477ba05237ea1c10","96c255a77ea4164d09159914b32da089f85f5aa875c62a7ed59168e5cfe12cc2","38446bde5aae0abe9bab7bc1dff4775d3c6c0e1a7473c7031ac84cc4afcff96f","3632f531fbb25d65dc8cb05b12faec67433c9b29b6ac2dace3ab9784682203a2","6efe54f33b5390b665c39161dc4b705d09c7980b19a75e00d49f37f110f6da7d","e6b35db6260df9ee7ad85916623e6fd166d1ba2bba5bd38aca915958f4905f75","06d796a3b8e297c2eec8a6da440c9f9c6b9ce7c872dda1a86e5b18b3fde38aa0","faf75fd6bb73a751917db6b8d00819eae7e29d2bb6f9270942a28e0da8dab05b","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"theme:roboform/fit/en","quote":"it sure made me more organized because of its ease of use.","rating":5,"review_date":"2026-05-29","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id331787573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.