Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Product order status is also not up to date.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514654467

Proof data

Record hash (SHA-256)

7f1a6acf55f885dc3a71ebec31490ffc974717901742da511db28cf16dea9201

Signature (Ed25519, base64)

Ijnoyke3GNK581zfz1DMmPE5OyvtMNYGbr7kK3zVw/DWKKhzf7vrXIGa2YkL2KpwhsorPAT8wWpbq26pnFThBw==

Merkle root

2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f

Merkle path

["7f1b46530b617638c745ee22ecd96efc9495ee21286788156717b308dfd67ed5","24ce58f96d65d54ebb1057cbb5adb550f5250d30b4a30270c16655f30544423e","66241705dff0e6c5088d005a280a626eaae66bbacab01564c0251bf923692d1c","db10f5e481a3d969be06560f20aa1b49f3b37eeb61bbe3383e64db91cfa0a364","de962e12273174d796322340d557caec3d92b707db221d9f3ee6dfc6e2147c0f","3912b9ec2c747e0a9dd137866f0a47b8a7e6a2706d58e68425a4440672040882","6f0feefa3b8d2893b657d522852f0ec022a91d4f7e38a1691cf712cad349aaef","eab6658d99e244d1cbdf1de52a91738d6d75c64caff44526239b4c47fb0c1084","1ebbf721b1c8e3dd33e9230da05cc0c43de91ad3ffc28c3705a4baa912c32556","2afb69bc095626605252e7e9d4b113af6b8c86a6030018684e1de0fd9a871e4f","10c33958aaaa494f48755d9db07f9dc20b661428ff46744aff7c22ace245713b","2ac6776e7123b51efbdc9029757d26f53dd2d9b88ed7d8d7316659db8281bcdd","5e71e1e70b37a69afdfa58b6c1794925a5ef525370674594f74ea1403dc0aaab","22c95139cfdc78a2baa7a8e247bcf81329645beab990fc5e095abcbd46515e64","e362b663c2c1f5a93380a04a7aa41b42f4bafc7f870e85cf63803f76c744c486"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…

Expected log hash

ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787132872903","kind":"published-quote","locale":"en","page":"theme:sunrise/delivery/en","quote":"Product order status is also not up to date.","rating":1,"review_date":"2025-09-30","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.