Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“crashing on daily basis”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c0a96473ae11d571fa1408c689dc245da5faeed0f9f74e088aba453167dd30e6
Signature (Ed25519, base64)
HnVj4e+11EYCor6TJoG4tNejQRezGhotZYABcA0zv2PY65v8z0U099C4ux+0tTrdjYUgzFNupMd/8HRMs/0EDA==
Merkle root
7252afe559009950531df937e7edc9bd1c57cf28a24ed7f6c6613b65f459eae4
Merkle path
["c0a80e60fd8acca282ab882585d2cdf6eec56248e80744255845ab3f9de02fb7","652793977dd8732e6c1e8b58d720e50ba7b27303c32a466519971659b90d5f2f","5521c661b97b949e8764038cf3b2ec3c3b5420bd56fc03e49e19cd9af0f0835d","2aa1f81c4662c24f0ffb32351869372d750bc69cfcf3e1ee851de2dba72e9fe2","736ace3f1d82ed941a132973453417556aed7adcabd94a68465ad116ae4787ef","21a5dd6d622fa73888137882c36dca2a18bce5117f6d24750021c5c3bf8467e5","589cbce6fc4e85f529e1224a835e5e4452e2b47941782e96178f326d0db7ae60","2cf21126554c7e1619d9d1736c52ff5dc86ec94477cacd2d3a55d5081cd303ee","182e4fcf253a7014e560ee99a1f8dfbe454365823674a976ca8d30bac6a6ef0b","06a9a87a657b9da7fc9ace8c1a62393aef8129036b071ee34fdd6af6df7fabcc","287ef8f5abbff3036a04e18ce5f3ca9b34953934d94fd8c7a90338aa0ac82880","7f7824639b63d2ebb8978f4fc2dfc471d7c8ef8b0852d9cde45691159af9feb0","ef6081918e55eca3fec73973584419d4a931794de381cb36d066a7397e956060","cd4fda8dbbc96e358ebf0ecb75fa543c15a1f0707b57959166ff1973bb1b4136","b3900b15a2a9b7aa805b691ce86e29db39e03d547238a84a3c0fff4fc2daa54a"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543383844 · entry 108e9186e8c5677a6025…
Expected log hash
65212d488cd7bdd0d67aebdd70bfc57f4b622fa08b8179427635d69eb7ec385b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787285599851","kind":"published-quote","locale":"en","page":"theme:threema/durability/en","quote":"crashing on daily basis","rating":1,"review_date":"2026-05-28","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7252afe55900…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.