Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nothing works after every change or update.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514541190

Proof data

Record hash (SHA-256)

82c3730fe721963c67db987825c8d9d192f1ec058bf76e7688af6cb2adc2d01b

Signature (Ed25519, base64)

t5j4THICnhYSyYFxsauXrUSLRsRD41y6bryKpIs8IoF9tj0JtdRtN/NITbIJO9VTfRHtPrApeQbUGxM1UfgfAA==

Merkle root

6ddadcc7cc1bb0679f63a30d8a28a2a72e039950945f2d7276487dd5b703ff7b

Merkle path

["82c4d0688d3d3e6367e1466587b35822fb84d7754f946a867f9b3f7fb4db7ff2","6d796bf2fcd9e2555d102d3da92ee5a684a3e75923ea89deb116121687ab1ec7","ad13bb3952afc2dc6f5841ea796d207e29ac5e74ca41fd6173e51d5f292fe76f","c4f83ebeadd6bc80e2f9a0bb03508440b2d5c6142bd0ced0d21a94c2f295b7ba","c9624ad4f51719451160e047fcabbe5da29ef15f768079bcf07b4c54372dc95a","f9c02f644d4f03cff16478b0532dcd10eb959e8e15c04f82a186c5b83ea8a364","d1b56e02fc73f1d0f6da51fbe8ad154761f3cca766581f27c2ff6a78638b1665","2f629e6c1f321af885f7c2555ae3434bb6a70d5d0d83da4fd69830c68b7107f8","6e8caade85963b4681e3448409b9122937241c018030f5253c27ac0021ebd42c","92449d08c1d5c9149a4a90d0767ed4b8dd9304475df00d9a64111f55edbef0cc","8f8e0a8128e7238cf27ef4f8e58d003ba1146194078a0fdd10e119b0a8870459","3ebdb721abd6554f0ac4f4d452f2d68ec951cbd72e53577866aab1da4b0638cb","b7880ec0b6ca5b49f70739afc9c55901cfda1f2917f3bec65d879f03db700592","6c80934204cf6e9e7c67e4289ed571ca8ef594df18a56fa355d65497266fba72","052ac7d24dfc9659210f2718e5c7e6b2477f3dc364546bd6ed2bd5df9d14d7b0"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514541190 · entry 108e9186e8c5677acb65…

Expected log hash

adca5adcd6d3235cf084bc9b408d3e4d7742d07347957346ff2629f37429bf20 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787130614827","kind":"published-quote","locale":"en","page":"theme:sunrise/durability/en","quote":"Nothing works after every change or update.","rating":1,"review_date":"2025-09-10","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ddadcc7cc1b…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.