Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Too expensive for poor service”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
82e50e2121e60766e9f2d8d1561a4530521914a7b8da99fab1adc32ceb96a59a
Signature (Ed25519, base64)
17SlxTxXDeSM3G8lZ5otM3qwLMLNNBd9sBacFj8GXy6qt9VGFA4UobF3k/X+zKVWiozwH/a4XwssJR9djKYbDg==
Merkle root
9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e
Merkle path
["82e2dc7fd03d9078a5083185683f7b220eab0af8e48393dc0134c944b5d3c84f","7330cc8137d4c6422b5fd6e31824d6f1ed79009dbf967aad7c68695e659b959d","267434ea7de8191faa9d81b7837fbad7d1d9a4499dd83f91942cde3743bbf8b0","7832ce7f50e4b79d8fa80ad62da584fe844e27f413fa1cab91720ee7b225bcfa","824ee0065e4763cb062fafcbcdd894443e462a220e17a71c4574c8e93e7f63b8","a7f2a854f47dc27b87dd44d9fd59b6ff72b02d8c858c0aac093d4615460703f5","25c4d94fef9d4d0d34eaca7cc9cc7ddd80854ba7913968dc3eed463bc09e215f","1bc8c6b2171b2e29692a409058f14c076e9e56594e03cff06a09e4af06ddfd1a","5def8a30f686feb6911303f648a81a8ddee692734d570d9c1923a7540e1c158c","22c7c0de5fa9133f5d3122cd92f2f9bae12ca454b0a40fed3c542f70fdb74170","1321ea9e1872a6fa891d95698778f7b33157b659af4af002d0865f575f796183","346cea62be3b419a38010a24eb74deeeddaa59924509f7cf63f3210f918348bc","969114be98209aceeb13470003a6154b1294d7c8dc772e07d6980600f808e932","bb86c0787e05591c350bbf95c58c2d99f0ba679999db51dee6e8bbec88a42a61","deb69ba818cac6d60ad262ee5febe93ecfd14e4c978778af299f82ef8a69b934"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543154575 · entry 108e9186e8c5677a0eab…
Expected log hash
0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787284115102","kind":"published-quote","locale":"en","page":"theme:sunrise/communication/en","quote":"Too expensive for poor service","rating":1,"review_date":"2026-08-01","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1292688012?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.