Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“simply charge AI that I have not subscribed to”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
838695fd5b6e4b2ae43580dbd7c44b4798cc0c30424d80234f88c926eebf27e9
Signature (Ed25519, base64)
F+8K7FTe/XoZPnyPLUhJrT4aUURK/0eCOsT8THgZf0aEHmGQdnXTF3Rc2wASLhW+Y4oK9rewG5DlgULwBTrvDQ==
Merkle root
8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715
Merkle path
["8381ce48cebd60dfe5bafdf4bd0c68151b4a4038414f24a23458d07d27b244a8","2cefee4a7ee3d3845a50b36a96cb4c1c6bff530e0f8546dbeee623d593a59c0a","b7f6d54c1e51d35bb9cd1d671f61993891e7a87694bfdd25b12e7f799743a313","35d296b4395abe707302a468bc2c6754abfccf765eff8b23a0f9229e0fb16bdd","acb197960c2bbffad8436c43ea467fc0a00607be80c5758fe60941117e5ec1a7","c65ebe44ff6f23d32b457dcd7ded7d62bc513533a664e6339d33369e1af361cc","d9a3200babf9896b13b8d1d320698415a097ae2342a6e29ed1b1ee4e2410365c","cfb5bd6aff9e361aa7ece6324b26d1c1fbc81ad77fea19549f4a67760d47c481","b2e063710e0cb191f62ecee88ebf62c38a89fd359fa7f189bfd6bd3b5ed805f2","2ba8a9c6b190d4029217678feceaecc99fd295112ea5f0d08af7f048802975c0","366df5d2e957d22d4c8b21152317925a65b8be8bbed94b8c04fdfae0abf6fc59","73f1a430980a35bacc0025104e62589b7f6711bf08b3ba132110caa28e1df671","5284fa1b0195183d338070f05d29e0d94229e3402263e30318e4f273240fdf18","95de144e054f717eac0f186a52d131e0ff4674147622cce8cff3d2611e7b6e99","8834edd87c11ce9424175f1744f71345038aee1c5b6f350a6f7bc2a49b63e8e9"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…
Expected log hash
b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787137589246","kind":"published-quote","locale":"de","page":"theme:acrobat/billing/de","quote":"simply charge AI that I have not subscribed to","rating":1,"review_date":"2026-04-22","source":"Apple App Store","source_url":"https://apps.apple.com/sg/app/id469337564?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.