Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nothing is honored.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8cb81371cd742424023dfdc76ed304187d49833147dfb666f90b78562d344016
Signature (Ed25519, base64)
Rj3X4baHowyIz+sw9Q3PExXJc60F+sCKrzrqj8VDoEwSVo/fyopDucCBDpD7/q2lDpFlUyAoyEDuz64CUi0uCw==
Merkle root
3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2
Merkle path
["8cb6aa9ebe4371b41fc8af809ad2b9e3742ea5c9d076798011821c3181c38007","5f96664d0535ab180f0a5611c3f49333b5ee5dbf19691c39993c4db729837612","8ffe6c39fcb455a378e7c257585950c257995f69557fca30f3d18a740f75a00f","e7981dd5672177605d72b6b078c171c7552fc64d6e92c282faa6f54bfcce8640","f9befdb7f026103722243b04820e3af793064633443283864139d43ab6c380fe","993f851db8d92b3889b4ae9c44d83ca117380cad72f6f70fffe6295e7035b1f3","5cac77e277485b2fc9e64eade7f7cfe6ca9ee75b5afe208b5f44674431402c13","02aa4cace3ad05b024f90379152851d8c2e36a1831710f25b712259a59235f6e","ead07586ba349a30137e1514f3b66bd6100723c220fb3daa56b60fb6c2e5a64a","f43f71facf9cd3b60aa6a09e02b78043143dcec36e8606a717dddb7c512f658f","468cdf58dd0ea97abe4cc87df4e2c6ae4ba97e7e3e582edd372f0e9826e96b30","18bcd956668318c60394fff5f0bf41fdb0fb08dc6da88d41acf5d8ad524455d3","94cc16c314f23592e99cf662d1e0fe526acdcfb48a4e645cf6fa83038dd8bf75","2f00626bc88d01c042a52bec5a9d951d8fcf3187df280beda8f094e8085a220b","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…
Expected log hash
d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787131980797","kind":"published-quote","locale":"en","page":"theme:sunrise/delivery/en","quote":"Nothing is honored.","rating":1,"review_date":"2025-08-17","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.