Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The problem has been going on for a while”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7d1d2861c7374f98dba08cb59fae2f9209183f313a9c5754742cd9a25521b61c
Signature (Ed25519, base64)
dml7LjQ1moI3fbLih0ztlTGA44DVlz6Pt4gyp8ke59MP5L1RXXHbz8oijjlcIYr99VyURrpUUhHXXTrnxBeCDQ==
Merkle root
1f4f3b5edaf264bc6a00193653378e6f11cdf7d052ca5b778d915c1c21c7403d
Merkle path
["7d1e2cbd0ab72826e46f449d072f8ccd81ee36b71dd9cf8e3c363883e698c0a5","64c86dd3a492aa6289930ffb6484622586b9384ecfe9e5b6a29e6a626afdab06","41619a965fbe735b4bc40ba8e08ba3dcd7fbf5b9ae54953ed01220ccd0018879","5003bb9344340bd1a4666eabcbd3dd557eafeb6a38ba48273ed6662bf7d8fbf1","75555ed4bf3548205f8e0b62b2f02925239816d7c53778b40dc2f18f376a3e54","dd78fc554f0ce37d58f44187893b1275389870845436b650b8286487e58ae77a","e4214deb0e5949713937124395297bc9a8074e41a62522ef52723211efa9a657","e529da14e25ab26fd79c26f8f002dadecc8f95c4bce0e5b329807da574cb62d2","367ea31c39879b7d370a6d195c2a720f2a46ddf0c482766a513d89e6d4240568","eec1db807fd635444c6441bf36ee441f62a2504e2b41be95cc853d6fddbf299b","fe60d475631ac81456d4aadd5ceabc80691e84611164100c97393a799e851c9c","eb0a6a4c2cf5e47f181a889197ee388faa509c27825a272b34062cfb17e38ef1","262a9f81238583e2cd1857070930778ca81e80099af74b7a470c955d877ca1b0","fc5a80f8a33a91194ac04bb68228972904c735c88173cb742b33f0dc7c73d75a","354ad39e35fba32f932ca084b3a174e4cb81b7aabf68001f138a9a4088e307bc"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514750008 · entry 108e9186e8c5677a7ac2…
Expected log hash
72d3f466bc589a4186e04430bc1133fbed10c2c1049384c2fe15c1cad3406981 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787133679631","kind":"published-quote","locale":"en","page":"theme:sunrise/communication/en","quote":"The problem has been going on for a while","rating":2,"review_date":"2026-08-06","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1f4f3b5edaf2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.