Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Now I’m in it and I’m stuck in a loop to get into my Gmail.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
99e65c2b17c183547600bfb0a3643a65172ab49f6743b5ba2eaa46348afab678
Signature (Ed25519, base64)
QNmGxTJ6fCxnB2QUCNObVujHClisePaqPSDGiS6dFK65RZFedQsUAskPzoSuyWkFnXG2OkK3N9iThrIOb4dlBw==
Merkle root
3ac2a65164a98b25d6607e9cd20ce9559bf4391886ca2eae943b9792fcb8a323
Merkle path
["99e8d2341e9272227314aff993f0dd1897c31798998c779ddc3c2b6db1bd7ad2","5c6778ffada11f78bab8f06fc7f74f915e8158dab021b3b4dfd6aeee51bb5407","7a6db25964be3d71d91f324fcd85cd37551857c3954be1faa1bb6baf70dc9d2c","2a2dab04a7a8ea98072af14d34c057b3686d884ed35785750a9f5e4818df0f09","0b7261acc6269a2445ab93f86713c0d366317b833b6e2fee4986af1ab37f4b68","dc967708755772d1f107096580291555b0ee9f7085f7d5c016b5732c9cef199d","6aa2465238f912ad5f7f55a4a9252103076d98c2f45d5f2e756d1d9f147c5d0f","223caf5f58744c9eacc0ff0a2acf05b2580f5c57f088edab4fe033b743830701","e45745aa569af73a5545998f382194197ee7217734555684c915d260435b2d28","d5f75e745caa0684ca23a7808d22de301d7cef08d1ad4b24ea9e21260338b3a9","ded51eaeeec9bb01ae3deeda87a9ffe7e44c45c833e1359c10fa97b490fb4f5f","0f4b77f256e9427d29659d887f0c8cca71533671c01727659cfd0d1606aa5668","1c9ed82e4a1ad7442873e6c6d30dd17df159aec14f56d07cad1d3492162bb050","582f0970476bda674580f5a1da0cf4286664f79c3451840f238219e2e601200f","f188a7ba649f7db7610333505ec2abb71ba1da1ea59f53190cb32e51e57ac1c2"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3083528439 · entry 108e9186e8c5677ac4c0…
Expected log hash
8816bf48c9e6a0b1ef2758b04fc7021824819cb4cee30b879cd603a10d38b8a0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791181418024","kind":"published-quote","locale":"en","page":"brand:nordpass","quote":"Now I’m in it and I’m stuck in a loop to get into my Gmail.","rating":3,"review_date":"2026-10-02","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1486322860?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3ac2a65164a9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.