Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“app doesnt seem to fetch mail”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7672cd996c574740cbd7188a5f26dd8fb6e95ed28e63969afd52404008818596
Signature (Ed25519, base64)
qu3TQljN5zQt2iDF6NQIzESW43pSkxPa0WnuNUnFclamrIPIT+10nfc/Z9MNQHOg3JJjJcWc23stSzSc0SDCBQ==
Merkle root
49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path
["767256b9afd2c4a01fc71fb1f2b9885c7536b3df29b7cb7c7663f551143e0dd0","70892f8eb7f2e8e63978af98c3a7854f39cc35aa1700496e628cf53133b3160b","7cff3557860e0fd0038ec6a82344c79442858f8208ebade88c822e3e01838787","192ae11bc265507eb6363445dffea0250926e9e7839bebdc6d5d87251180c2cd","a4095444112886cd956daa972d5b1d20e74c0795189f66d085d16ba5722114f7","24381b7a6e198195ad1a3f3d164f30b889d6f693a0133ea987f9ff20c5c5b5e7","34063e76deab4deabaae7786d55547ab7511bbd8067eb18f466e61fe44eeaa8a","ecaf73b9a1e13e05fc2e60a8fd4f3df9c8cb8efccebc4068a351c22034e6d917","a7db63f7c0e38ef23bacaa6466bc0455558edc920f53486c3599c1e5857c315e","2eb08fb7b277b2f1b4a11079dee1024336939264231b063cce644a3ac9d9d8f4","e8352b08697a89bc5882b4f6f02db1d3b67b01405da4a821574952588c930ed8","79b266fef4387a3eb13229ded49c020294637e97bbdb14afb5838386f7a6d53e","111d2d0cd89c2d53981ba81e6a10a0e3f8f1be927d4be6d99e4f29e2d9c3ae52","541a456de48928931fac4c28e56562983bd2f8cd0c9306116286df2e2f1c9422","d81f506ca96dea712a8b56759200b270fc625cf496d323ded3475eaafeb2d916"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash
d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791428432986","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"app doesnt seem to fetch mail","rating":2,"review_date":"2026-07-26","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.fastmail.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.