Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“leaves about 15 characters wide of your email for you to read”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e591c664f7f7ea98e6d27cbf4b9c664d888a1925893b95c00abcb1f91ab1c3ed
Signature (Ed25519, base64)
STWA9+lqiEKHwc5iV78E34FXBMGyh1zoZNyT2WkbQD+urYRn+AOWiSAXnyf5ub7ejjDbOqNitj2SIfwFbGOzDw==
Merkle root
52d6be1abed15ebd0724a0e1a493d5805e1ea49ddcaf8e9e5584928cd3e4d759
Merkle path
["e596202c3982af97b00b91229fbf580a50ca1abfbae0c10717d316395e7ea47f","b9ff000cd553a7c3dfbfe121ce83501a5697193ecbcdc62f89159ee5560279b7","a139b724853adb828dbb6b4e0501d3aa6f997d60725c7f1bf6b23eadafe4d8d4","610ea57059b14ba8b85b43b4cd522e13ea2db1535544b269aa3d43f81c431c14","0eaba4a21b78bc344582ab2aa7f71d79c5d3cd6d68e18a80cffc412401ef516d","79fd86372300764ef93831d5b21bae8590e3746d4849979f98e93e09d2c267b7","6b371f0fd12b1f874cf8789ba600b49a05c24ebb47098e55e99137d50b24ef49","ffef5a8f5c3ecc51f98991bce44ad89672e0e4c79ea2d22eabd4d316d9fe57a8","68692218da3118c6be7596399ec4d74643bfcf010d3cc2039f85139d9c022697","84c9f846c69f54f4d2e3231ffe9161713bfbe2cbfd46e38518ce235fea22a951","f054b873a732dd907a1ab08f3948a416c6e386a35a7d1f35c44d2e1903d9d786","8e5b5f164b4138fd16cac15226197ff2d995652372ffc88c306415b74fb17312","6cdaaeb423ac3ca9e71d9b6b7eb5dc348e1fe6f5917591151d442780b0e12a0a"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140475820 · entry 108e9186e8c5677a78c2…
Expected log hash
bb68bef30792bf00f645df162a48943f770bc3f026216a44dedb4651c8ac0917 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791431489246","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"leaves about 15 characters wide of your email for you to read","rating":2,"review_date":"2026-08-31","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id931370077?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52d6be1abed1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.