Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“in the end, no one gets back to you”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2515345787

Proof data

Record hash (SHA-256)

7f0fb0677789b25d7b99170840a9b50cf34a8511a7dda82ce8d5c30b977c08fc

Signature (Ed25519, base64)

ysFkomMzbUhx9+Nen0l8mbabx+hFKOtFwDABY0Pms9xt0ywDIlve4H/R3ilM+J84WLLQVmNNuroNCOfZg34oCA==

Merkle root

e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465

Merkle path

["7f0ec90202f97c7e399666884cd7ba00b6f180692bb35528124f34b8685aba5e","349a28ffdd56be2f3360ca0b560e52cf3cabf8634e29b6f9ebc7f89af3bf5a78","876a372fafba3a97375684b305c1a94f18f1a8bf4361cb9e609ba0b3f823c31c","6f87f25c1505bf51dbbe2485f2414fd49008633fc2222707a2435babd1fd3d69","2fabcfb83f0c1f1715cfe479237c543c335362eac0b7470376ed0cfe0481879d","cf597f389cdad9c0d297f313595abdc077273a18cfb813b7c5e4a0f3bb3c93af","c4daeb1f83ab1fcc3ef9601ff4ffc3d9ee3a573742f628c1d8daabad41bfa013","c23aea34b095af1a1376e66b26221b7c940f77aa823897cae8f0ace06180b9ab","ddb6cf7e2aa753eff75e3a3986c920a1b951bafe18c2ec61901ef7d76a13587c","7fea5b137e56e33cd8bf2e1b6db4ac48a3668c604c1e75e2ec0f1a0ed9858465","8ee7032db4fdcf5b5226ce1f8cb9a0c745968d6a4a5911747fe90464bc964504","db7172ce14e794d11e5f11fe11ac06253cffac3c662e17e925db59b4efa0b12f","7f1d0c445bb13ae8c90e977abd9f4b017f1736dd8a0b6837e8297de8e292d186","f1950e4af29dd22cc94bc58ead6e376c41b02edc9ab0ebaff7fa6fa0f9bd3732","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…

Expected log hash

d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787140356347","kind":"published-quote","locale":"en","page":"theme:sunrise/communication/en","quote":"in the end, no one gets back to you","rating":1,"review_date":"2025-11-28","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1231971182?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.