Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They geared it heavily towards a yearly subscription which I just don’t want”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
afcceb41bdbc07633e066280540651714dd631e4225757c2eff0d393eae45d31
Signature (Ed25519, base64)
NY61KaEBGWBuPIGr0KNA/duMzoKZA3FSmyEZDbDxbAmpDULOHNO5p+Mft/m5RXDNTkU+ponQSZsdqcUtWyMWCA==
Merkle root
68ee5f8618d9ce1aa33f2cb5b6f3145b5f909a3c35a03ccc3d10e979b2f81082
Merkle path
["afcd5341a305f9167f595d585c803e70dc4d7e841cfcfbd98f287f6b16e57c51","18369022c0ea336ae6a9421cf1bffe2bbe2e01c228d000fa975e409484498e9f","ac3f05de24d6c085dde8eadaaaf2f5f1f3724dc561649b239dba5fd817696dea","a210774fef4a8c433eb3915bcfd24f17d40485209bb358c1df8c8cb6294e72e8","053f1a6592c72a09b6a4241e2c1ad87582fee19bdaad8d09874b653b05cbbad0","623cd4882339d970da20f5ef71acf74722e6e7b632746c85d89438e35f09bfc5","eec2fe035f07478df6fcf74bba5c75a0a5cd3f1076242c3f8646956662b27c4e","e8d4b7d9c0f15b719cfdc48410157625c7349007c87eba4f1027a8a940f52c5f","5e295b556c28aa43f12e67d1f0f36cbc10fb090dc14c1c66ae7ab4a39d242033","31c908fa0cde7e9c3e95bca70bbf2965e2b09cd6bfd3e3156d7602aed504483c","613c7a54deaea880de2f90c3addfe1a9eb79204606cc8973e29c47e36117e1b6","d308ed26aa33e6583b9c3bffee658c14c60f68a86ba341920aec69f22e129000","6a51893e356f5237142345fbb4d247bc07582fec6fdaa61c2c3de34a1617528a","d4477c34f5adddf1a37719c473b5e22e5d24c5bd237b4d0a607b953cc77a4964","418554fa0ebde54d6cdcc03145c7126505ed96d3734e8e7ae56dc0dfd8ca0a2e"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140838741 · entry 108e9186e8c5677a4791…
Expected log hash
ca4949400cf2d29b49789563ea2e672fc73762380548d6fd65398e40c0d98728 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791433229105","kind":"published-quote","locale":"en","page":"brand:surfshark","quote":"They geared it heavily towards a yearly subscription which I just don’t want","rating":5,"review_date":"2026-09-03","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1391782046?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (68ee5f8618d9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.