Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the so-called “free” plan is actually freemium, with hidden fees that weren’t even mentioned in the terms and conditions.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543266411

Proof data

Record hash (SHA-256)

e2d8f0e0a0499a1d4ce9393199635017fecf2b9eded117c61a64c3284d769a96

Signature (Ed25519, base64)

fnLKHqo6ny7yfPDUOpMLL6mkoPc0jTj64BHC94+0NyXbJVFjtHTeDE67WmAIpjoVy9BGL3DdKC2K5MiHQfSXBQ==

Merkle root

8ffad6e97d1457610bec7a891f189d1ba7dd7a92ca672c69ff1ce3283acb4b5c

Merkle path

["e2df882f4ca96597f8c0d0f5b180818b6513df272932818730fc787caffcba33","46049b32b7d623278cbdbf8a08c2656bf78492b473c133e28cf32e18a7c600e2","5c5a9b0a8d68ad812cfa039353194330b4d4b8af9615f63fbf744306cb462126","072f6a3557815494bc651cea20fd22cd40b39bc4d767b268aa9b7713e5f58f14","864ea50238315315fc3c2271ea0cacbe023fbdc547c199705bbd35a10ecad171","0f5735d52bc718dce0d538eddfffa27ca6c430bcdac1c7d6d51dc1049f2841e0","4bcc697e73d5e1d221bb70d86b4be85dfcabda2dc663a009ea7629efc8464adb","d447b525dc4fee0e941effe959f0752c7e42c873bf55d8c2a7b42965ab902afc","ffb424055530885d416bd2cdf5e6d637a12bb13c3987f004c3162077870634e5","68f076c25139ead8498c36afa1a78c8917d25221e1c098dcbe1252906fe09594","3f20e679e330e19f05a6d202f0212bbdf9a6cc60081c4d9fc0d8614a87b03092","68f67ed9d4f0551dc8184bf1fe317b5aaba313190329d5e3918085a89ca09c8f","103549e053ca76b1164fbc6f4cd47c3c965502ff32950200621ab55e4e061dfe","7c94ff27d324cfeabd6b92fbe8fbca077bdf14d29975169a3a05e610d1bed13b"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543266411 · entry 108e9186e8c5677a241f…

Expected log hash

443ef8f29d5167ebb4c56a46778facd07b7651afa8db2d089c14a991ce0d04db The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787284817344","kind":"published-quote","locale":"en","page":"brand:neon","quote":"the so-called “free” plan is actually freemium, with hidden fees that weren’t even mentioned in the terms and conditions.","rating":1,"review_date":"2025-10-14","source":"Apple App Store","source_url":"https://apps.apple.com/es/app/id1387883068?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8ffad6e97d14…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.