Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I've been using this app for well over 12 months now”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c39a6e304d2fde405b2da1eedaa9e6fe5854ce164e5aba3a7241becdd14d4601
Signature (Ed25519, base64)
Hgh+T4Yd8KpvmbiXCs74JRO2w5nwtTyLVZCSpN0aiNvq8mcbYBMOk3vyPy2H3DMq+Qt99kHI6P9asfmZsCxDDw==
Merkle root
c35385e3159410853b606ace3c93abcb561dc35874bbfae2272c5b0050f06a48
Merkle path
["c39581bae7b9c7ea65095e8e73e0686af5b69d7d72c4f10f03df38068d175638","d3cb86f4f2524420e51880afe14f279b98d65aab92ed932423e801b5e59f6d39","9a7786fe42918e29a75860584fd00a2d469edd7f79173b2777a74d5a02d8cd66","3c90bf244a25cdac3e9db29824e61b535a032ebd05ae4aacca90545470115227","b356dd2932d8fb1e8e8725adf0603dc2059aee226fe819446ec50df5fcdcf401","18d6bed0e5009cb551fe730db077002a8388c8f556fedfc25a21014c178cbaa4","656121364ab4158485bf3861689f0c0ddcb9861c6ed86ae204c213633c3a9273","457d2c8bc835d83fbf6075a7ff7975cb778ce03cda8b146cdf9d5ca8e6470f34","73baabec266ea7dbf5b469b947445cea9416bc5372ce7d4c90d2b7ba0901fbf1","b90fd1191c0b064a22029739fcd315785794f5090234a452dc10042f630da8c4","f8f574716f5c27b6f39147e91030f066e11ed77c69015913e3f66507d0172fdf","0081d7770eb293ae5d35e3c52bc1f7f037a9a5130ded29cca3bec60c2f494ec3","0a7c80986147018995c9d907a329586b34e29fe08f57a8d6faabf732331fae2c","c6a0d5b9a6cd8badcfc7fc966f87c537da74da6d7b76d14d1aef5f5ac379b21c"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514083622 · entry 108e9186e8c5677a81ef…
Expected log hash
eb47f42546fcc705387579993679cd6250c0b995d01bbd10805cb4c8d66efe2c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787123762743","kind":"published-quote","locale":"en","page":"theme:threema/durability/en","quote":"I've been using this app for well over 12 months now","rating":4,"review_date":"2026-04-02","source":"Apple App Store","source_url":"https://apps.apple.com/au/app/id578665578?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c35385e31594…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.