Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The service is unreliable”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e3d6979bfbbd6eca71e6b7db957f6d97d63aa27ed58bccddabfd848da4fb8df0
Signature (Ed25519, base64)
yVlFdn0R9V6rf2vjU5HNQKrIq58cTPiK2Gu+fwChvxkLIjOR7NthqRQ4Hjw6zTKfBVApGmAvjtfX15jY/DAPBA==
Merkle root
cc942239c46f13b1af6cdba0960a24a6cb62e7a7a462aae1e8126c0182dbffc3
Merkle path
["e3c988249f899e690c31742fb45ccba58d55887efa65b34613ce94d76e6eccaf","964e7a5900891a977cfd576ea92281e72bea251479247347141c9f432d6217ff","7529e0652197ae6dca2e2f420e158ddeff4f72dc6cde7a98e809da41f644b439","2a07b007041a3d53a0851a8b64a0e0d2f250615a2665ea24150c137607a5047e","6e78a180a0dc4c2e50f555943dcf78a7a7d18690b924c36abe309cce706020d2","854b96a7c224216580ebff4ac276085b199418f192ca867fd4203e1a01289e4f","eb1ebd1cdc73b93684de81304e3f13ba173f1929dcaaf7367a08df427aca16dd","91d68d400ccf33de0416519e18cd33f163ab8159cba89e3611b6bb5d184c07ab","9b7ae5876c0c512a26df97f8a309f6c9bcc0bfea53d9be7b21de7b0381bc9e9d","4d00bc87a31dc3fa43ce0b630a3c26f0e389c811b6f01318e2857c53245da509","2939c4631c1ee56df23e9a3848380949b748c368397960bdf443eb4c9da68e48","b63b8513f160e1618cf5c9ee042146836545fd0f3fd29ecdd8c7b7c4489a2234","d5c0f48cd876b426b1efca655d0aed02857d58331679df8cebb7a18a1e12c472","60099dbae313e53e1410c43a173e183f13f26b3b253db87c564730ddb5969e60"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2544236959 · entry 108e9186e8c5677a0341…
Expected log hash
c82e13ba2a716d66def44df55ff50c2e9db35da204570a7fd5650a8bc2702db2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787290890795","kind":"published-quote","locale":"en","page":"brand:salt","quote":"The service is unreliable","rating":1,"review_date":"2025-09-04","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id969561743?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc942239c46f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.