Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“really became so much worse over the years”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c1201224427ce74731555428475632efc3bc816aa3f14e7a16b51916f0d17357
Signature (Ed25519, base64)
pM736ohhnkaFe4E/G7L7455qqLjI9OdjBzm4bcUzMeTy/iNtPlAg5SA0a8aw5DDshGKK3IiGH9Uc14ybmly5BA==
Merkle root
8c6268a14330d1a3403c561e774645b0671f81571ec1735d4674ebe1de7502e8
Merkle path
["c1288f68ee7fefa77b8d81991c68030042660910d0ceea75dede252f809d2eac","e9a74c7bf20c776b14d19458f7b6de1870163a188c8788d24fbb50b900df820d","24e3854310f9396d3cadcc181f346f870259a1d58408d5de741720eaebe82110","32a1532c370e7d8ce1e3d52a5bb4cdf769a39d9cccca692a7ab690751982f872","e29db5b8de3d6a212eeaa733f1bc8370ef8c6a73fcc7a80aac798c018e0a6562","6321bc2399548da69d2450e17cfe54e3b7125d6cf60f7147d27d5cfcdd29fe00","999acdc0206e488f7e4b38b512aa671482ee98d16d965fc44f14328a128791cb","d1e072eb726293972832eaf3827d86442aa4d1c2fae3ccdf3c7f344cdb924f70","11679b46fd83ff7f1988e71c04572e22c0b70810d439b743630dca01eddd1afd","bf2b8268704c3f444c9c2420cf7be778538df6bcaef5a778d1db69abb17309ee","2d713cd4879aa54c8b4f8e8180645d287b3b7108dd3a6b07b54fb049b1e0439d","46547533536c23b0cb9fe347aab73c6bf8b07ddee2809398e2cfc721d5951813","c483df2db2ba0256789552c7244a58c96a87dd33342e2eb560908ca98074e6ec","2de97363b84c3a3c7892d6c13559facb127180f7fe51ea764f30fd45ad533e91"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515439294 · entry 108e9186e8c5677a4f15…
Expected log hash
128701fddbb19410bf57cdb2d04d7a0278d13bcfda6410d76f176fa58341e1c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787141082461","kind":"published-quote","locale":"en","page":"theme:threema/durability/en","quote":"really became so much worse over the years","rating":1,"review_date":"2026-05-28","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8c6268a14330…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.