Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“That was much better in the previous version.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a94d3aed8e5175702828b5b52c9e267aa19beca9bde410cf0e6274f2ee2326d3
Signature (Ed25519, base64)
/oIBWvJRDGfyQ4v8oofuZURpFONdelKkAgHTsc3OpBdJvSiF4JQSF+KiYZVbGvmMxhwJHBrgxz6cDHAnc5pfBg==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["a94f56a63d9ca8f8d02c8f34ae03805437f06ea382162b443cc65a5e32a40cf9","a8447984039cdaa6614a42a16d0c0a2e9a6fbee79bdd8aae4e492797cb483faa","e2a78f9fc95a11cfefca0842ad8b6228d405d8e7e1e8b946c5402c8cb79885d7","215decec40fa4d73e704f5144ea055540b11269e654894a9796b2f53f25bf773","7bb50ebc63783de6c515866f6aeb394a83a760db5540336980b3899fb6669988","f2caf029dcd03f5d397f6e50867bfb70b10cdd14be0041e9d89afbb333fde857","666feac7bc08cca8df18fc084e1b72a777e3f56773da79deaa959ba465f0c3fd","462f332f0831025e6369037e2855362fabdcbdd89239639da9a786ae6c079ccf","12a117f56bb689221e031b82cc7e8783f14dc1ec223594e7a716d5fcf7edf306","a8a525bf9f41e472fe88f06a9981a67a36bb24320732793e63b4797f7f133383","e302608cc8a7402e6dc1c54e7d236a595e6c41778a1846fb815f7871d709df2e","c1ac5491b2c2bff3b2bbe2a19d42e4ecba426059187e1bca4f6f26992ecee04a","1618a50c65c1c20440a46e4d4eb19ef8978aef68daed414d633e6695b106077d","ac4c7c6db85c9df99401fda1075a3bd42dea9188ac58b0911e04bce8752d56c6","78eca2193b177c5ad7546ff5d365dd6cb79efa278dddff5151740888f319c0e5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"en","page":"product:pixum/fotokarten/en","quote":"That was much better in the previous version.","rating":3,"review_date":"2025-10-02","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.