Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Works great on Windows and Android systems.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
923e329800d6d502e6595bbd396b06d56929bfb15aedaf49b7ddec7b017357c7
Signature (Ed25519, base64)
RdDwzHkvuveKCs4vSz6uTknZ9ZP2OFX8y8fmNt22cgvcRYVQCa0hd5wrv5/HEa5eE4eItC3BJEyZIAHQDY+iDQ==
Merkle root
68ee5f8618d9ce1aa33f2cb5b6f3145b5f909a3c35a03ccc3d10e979b2f81082
Merkle path
["923483f92dc012096cca211a64d06b0861a2ccf78bd291019986078ff03354c4","2cd74fb162b14c2b0c17d74947dac691529c36a0ad0bad7c6bd270294aa78f38","33b74a2111a41b6a5cc263db1f2fe4d5a6e30af899df5537058ff10d52fcdef8","a09dac8f67a8d1fe6f90e449745a84495123e9d49d4a85369d3fcee8cfc67458","89f65c64aa95e08d6c78d4d375d8b990f8f3bea48de61bae08f831e6f22b0b59","cdce8c9218ec9f180f0536115cb620d3758bd3bf24bf4ee8e080b12327293f01","7f2b9d2c4605fe222d40bcae7d90361179b68b1497843625b0a8cde080de1bb7","dcb31953101783a1d9b5b216a7f0923b3231c83e05b0381b759a6c213fb4310f","f7e003a402df1c17ab0dba6849647b6bd48c672cc621592df8da8129b565f1ff","0d39a9d545da3d6333fc366474f2e0037af3077f4729380af674463aae3afd4d","2b47e8dd39271e7aee557245ca371d1c4e04cc143a4f6e14d4c3869bf2c29508","d185783a81c7716a5a5a44729493173b27d91ddb6e267aba0a71a1eaeec19f52","5a596d48ba69503b90d023ad33a47e928bac9c6ec029bb6fb09b632e68ef85aa","d4477c34f5adddf1a37719c473b5e22e5d24c5bd237b4d0a607b953cc77a4964","418554fa0ebde54d6cdcc03145c7126505ed96d3734e8e7ae56dc0dfd8ca0a2e"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140838741 · entry 108e9186e8c5677a4791…
Expected log hash
ca4949400cf2d29b49789563ea2e672fc73762380548d6fd65398e40c0d98728 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791433229105","kind":"published-quote","locale":"en","page":"brand:surfshark","quote":"Works great on Windows and Android systems.","rating":4,"review_date":"2026-06-26","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1391782046?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (68ee5f8618d9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.