Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“If the phone fails, no one has access anymore”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
899f68926f0d4a50f5e30092abf3be368c0c3586b5000183cea1718abd80162c
Signature (Ed25519, base64)
/uu3h+D5ynucX9ZNKrKRWkIu4eHc2Snksb5ivYb2E/AGTxakBzNrkA7QJAZGYAxD4chSN+8XbNdKcNJvG4oWAg==
Merkle root
749703591848535a8600340214debbd99b61273e3bed402bec28b292f90ce9b6
Merkle path
["8991d72c364b9c6d85023b71a989cf2854bab6455140b5733a958448b6548a4a","170afc3fa19cc8cc216604f68d63a0fc22acc566facb5afc5b91e785f853f657","e0d4f9ad31708d9bfd9dc84ae05fb8b9341681ff4095f2664cb590208523055b","4adc5aaa2f5594e688bfa34e0284a074fab29b355bec8e07fc62640a997f43a0","8b882b3edb937875a459d95988cba61b8138384577dd08d83288bf5d9e6c6686","9a4ef2006a9d9b3d474653e4bd3c0e16f9ff0268878747dd729dbc788505b9c5","cb50a374c3bfef361908340e7c67aa38e38a0d9bc6cd9f84b709ab4f9b377346","00c237cb5ff01b4bfa9874d0cd912d9e0dc0a12acdb3726f96e13f537a8614ba","497544f59b804d7d8359696245018b08caa3eb658aeb00be0e3499b0c8723b26","564c559aca67fc8502d9a3d31424547dea575122beb6eae8d807df13ec678390","a7cd91b7d023a3d9c9a8999a9c249865ec76ba4602ee62a8dac97a64f7e76ad4","5ecbf18c269e0f08c046a64f31d40517960a476244edadcd2abea48908fe7889","d0a145fdcc79a1039124c214c6d7364b7312550014eee4a8d0cd6c39ac03c378","0e5993cd09976fe1433892fa8ab65a03ba04fe977e193e49bb79ca2557fb61c7","bc5d1d560a30e83fe0f1b6a9452dc46dc135b1a7f73575ec3aa5d459bb76fc8b"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514602687 · entry 108e9186e8c5677ac525…
Expected log hash
e53e7f935eb508100ef1046b60c784e0bda15dd54afae176c275a97cf1f64052 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787131269839","kind":"published-quote","locale":"en","page":"theme:sunrise/durability/en","quote":"If the phone fails, no one has access anymore","rating":1,"review_date":"2026-07-14","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1231971182?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (749703591848…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.