Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I think I'll have to switch, unfortunately.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7235f8a9eb027064f3d178a8f607a6f6ca37e4b7f21075b8035438a1b4375e68
Signature (Ed25519, base64)
rHG7bakebV2XMWe7j9aHtZHoxqCjco6Z/rhj8hGvMeX8ZyxidDDpla9L+tv9F49FuLXDDSSI0KPmOcA1iFLtCg==
Merkle root
9ddf6b9053b6e5e7a2f15ee7f3bfc8dfb72c48a1917ae5b7e553033e3ded6523
Merkle path
["722f5a8b4c5cba00af0adc5139912279984fa813fa648ba90dd569dac74ceef5","1a89eb6aad46a43cafd1604f292e8e00e01a555e28ac8023e5d6efd2df8b6fa5","e5c60bbb8266cf5d8909e02f26367670625d86c4d558b0cdc09ed42055cc2c51","ba7c1d77d2d4b717747b345010c1f61ac72cba6253961d35633192191c5f4e96","ae1c2c9b0548469fb3277d6a312d8876d0307505b236d5ba48205097d283c109","daa765083db878e3b33a5fd5cfa9d1a73929efe1bec2ba0dbcfe75b4b87a046b","d50011569241804b2eeac22c7f72527c2470cb246412da674287e8bf7a2b5730","76cada4086b6ddca5b8c90a1957d8c343dec9e5a549e0c64e375927a00eae8e3","d3294edfd7d42e1d750b0f6ccac4291c2ec87161db9723da646537dcd391576f","9af5ded03ecd491b035873f3c53625612d6e4d8cf314919838710238ac004683","bcd97fed11e40acabc9094d6e48a59bb94f71d25811319fbeb8905370f330b8b","2b6dee3749b82f13b3b8a641bbe3341e0b73743d28edcad040b0254dae05ac25","a21260a3b3feca1d6975bcdc8cefc8114d0a842f3a7e63f8b9f1b1daec35bd2a","ea40ae0189ccbe6f115902554a87d5a76ecff9d4f22c2848cf6df598f3744e11","50c4eca268fbb41f8c6bc36d8a5d1b6cc09733d96f0fb33e6cb584096c56f695"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514967984 · entry 108e9186e8c5677a902c…
Expected log hash
be0cb34bbab326d10b25013c37c9294b14554a6c6e9fac3dc68c06dc2c3c60e7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787135269737","kind":"published-quote","locale":"en","page":"theme:sevdesk/returns/en","quote":"I think I'll have to switch, unfortunately.","rating":2,"review_date":"2025-09-29","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ddf6b9053b6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.