Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Why do you need all the documents in the world?!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
cfbedab4fcf5820dbc58ff54aaa10eaa4510ce1394a068f84e29620a36751d14
Signature (Ed25519, base64)
I6d5EOPb8dX1o7Mq85QXsiRbHB6/uPq7BO4aOnVU09b/WBc1pdOenOfnd7tMwA7QJzS2zNscCLsKxp307ueABg==
Merkle root
8c6268a14330d1a3403c561e774645b0671f81571ec1735d4674ebe1de7502e8
Merkle path
["cfbe931a3d7109581e38607e0b6b7519a54407049f5730a0395390609d5aef9a","993607493bff258c065719351e5f616ea08ddcebfab37c6bd541396213e18094","f9872fe6a01eda6873013dced9910c5145daa5f265ba9eef8729e1f6eea47ed6","8b68ce2ff8e6cdb7dfd30f48349e90c84ecb796c61e7bbe0e2111706822e7352","52f10e92a10e7bbb845e810810bf937fe322056cd5dba5a2280d193faedd0148","15b1a87801366608cbdc8386d0bf9e59e7f3f707dd8d1fcc59e1ec46126ec3dc","70b6b4a75e83348f9e66128b8b4b065197a8b7afc6bbd56c4d2b3334243ed1f2","d4b733b91d4eb176b8d451be1dd9348a1e5ddf31f56b6a719d6bfd604c5287c6","11fcd91a465025fa56c77f336428e9a5e2bb40a182209be9a60ac0469cd7b8de","3a35f336f4eba13893274ec16ff03f30f2df7f84b17ed8d26c21aa741e73add5","217469924c8c117b4e164e8e263bfd1d293514a31ad01a5e5ad03bc1473643e4","46547533536c23b0cb9fe347aab73c6bf8b07ddee2809398e2cfc721d5951813","c483df2db2ba0256789552c7244a58c96a87dd33342e2eb560908ca98074e6ec","2de97363b84c3a3c7892d6c13559facb127180f7fe51ea764f30fd45ad533e91"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515439294 · entry 108e9186e8c5677a4f15…
Expected log hash
128701fddbb19410bf57cdb2d04d7a0278d13bcfda6410d76f176fa58341e1c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787141082461","kind":"published-quote","locale":"de","page":"brand:mypos","quote":"Why do you need all the documents in the world?!","rating":1,"review_date":"2025-03-10","source":"Apple App Store","source_url":"https://apps.apple.com/ro/app/id934401253?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8c6268a14330…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.