Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“After being a longtime, loyal paying subscriber, I find it deeply disappointing that you would introduce a new payment model for existing users.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c83e646550e5cc040278dcbaa89b9125c4c4c9cdcb0c2c30ff24f0b1212fc287
Signature (Ed25519, base64)
nla2ZzxzlQiH1Ke85jNtKFM53DjaUpX5W2u+zWNsSdmCWPi83vRjM1hSm4xdFagIQ9LMpLSXVYPMLekWHIhDDQ==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["c8436d9ed303f18e7806a97a941115ca47d86ad99626bd216a021f21ba232268","0b6ae619ef51854991e149a7367eeaf53b59c7e3c65ad7e5326269d32b1b4a05","0010562ac449ccf88f0c8de2b4a1a187f2ccd322854744469996dce6641ce78b","f814beb5294141edbc2bd908771df1bcbcee2210d4e7aa9f78ac729e1e706bf6","b1cfadc9d3fd58cb0c6e0accfcbe096bb051f312d341fc1de6b5390da26b81a2","23268371bbc1aa24360b558332ff9101d27be43c1ab5c15e5d07c1c5d9c93a40","15b9b982e4d0292f1b24da27637e07d71667919f0f3b1706409527c9ecbe931a","d7552963c530095ad218da12ce4e4e7c168962c36ecc3ae273f8b1a424577de4","4b79f8f5012e281ddb75407ed7af75f9974e66cdce76bfb9b6a83d8577be0f7d","0cb47aeb2c56faedba6273b77174655453b82fbe544edf1e66b7823b95a193a2","c635f0ec267462446a63ec6b2accc48e91fd2805b91824e03525e4053b26d1b7","271ea18e0d929c969a6b4d324788b46af932cde0a45a951a5ecb3d6a642cbdbf","7e472eb0a3b58e61070423986bd83b0a6c7c1fb4306803b1a250ecaf0ef71a97","00a544d427d2b0ef6286f24c44cfcf3a5f82bad04bf6442e459c003cb18785c1","10553711bf6721bc3fa0f227ed3bf669673b7af202d9c22d19db8987b7ed8714"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"theme:everand/billing/en","quote":"After being a longtime, loyal paying subscriber, I find it deeply disappointing that you would introduce a new payment model for existing users.","rating":1,"review_date":"2026-09-13","source":"Apple App Store","source_url":"https://apps.apple.com/dk/app/id542557212?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.