Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Reset password, back to login screen, entered email and password, again: account does not exist and so on…”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
b2caaf0f3da3d1f3a8931c55b4090d994b81d4439b9260948c20afbfd360f14c
Signature (Ed25519, base64)
RibBhK0+gNq4x3Io7cXlV877JEd/IvrFg9drBtjM5Dqx/8jtQ19/fevznSuzn4qyy4N2IM/KOzVLAtPeo4L0BA==
Merkle root
689da4f5bb049dceb797a1ebd18ec1f343afdc6a2eec17587eed167cc7c21a02
Merkle path
["b2c95254927b43a9976ed7fd8f7b7dda88e5357a7cc356796b88497f79d70ec2","dc46884a49cd9c8248b50e613e527e7c61703a15732503c1cf6d4ed50cdfb2c2","85454483ade2d1e764b215501905dfc07764a2c196d15143458f7eaaed7cfae2","1a096526285fa22a3dfad4a2c406c34906c938c1b3f0133e08dcd4c45915c671","0b08d8fd7bdc50499c178b69447e0b451b67f70bace9831be1058f926169a1e4","8203f32673b066ab87d1db4c324ac7950a8da38b681fa47b92ba89d1793b1aab","148838908b0012ee37764bdd5fdea3c85b8c37d85514cf60b9b0974fe0f9be61","3d7c904e8159ae47e604046942130cc3156c2c368d977fe6f0cc9b49a1448961","8474e9343ebe4ddb0ef50ed2ebe386dc93575feb713e28097ae8a3437568fb2d","3e733e0716c91e6932ab757ccd748b7603a6a40c015d9ca06b3f3ac6aac0a16f","ff2c273ccc874c3bdb3bb95e4e869f64eef3d1c23cc4ddca5e10d2e4b18d8dd6","2201ede7ec211aa6d3c36c2058da1921610788f4f2c1659e5390f2dab6a4939f","a8e81c9c4be1ce6a1aa5a4719319676786621cb7b2766e1f6a09f45dc1bd8c8f","f868ce2794bd46d50ad026b012c7d42f09aeedca360fe9248ca59ded31015a27","2492d624e607c70378839deb70fe4bc4c618faa9a11f2be7d0e42b467b07d755"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525430207 · entry 108e9186e8c5677abb21…
Expected log hash
68e6afcd6c232c11ffffa818a4cc0c5faf1a86dd24e2ab2a7811fa1f4f43bec8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787196781193","kind":"published-quote","locale":"en","page":"theme:pixum/returns/en","quote":"Reset password, back to login screen, entered email and password, again: account does not exist and so on…","rating":1,"review_date":"2026-02-27","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (689da4f5bb04…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.