Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“great app but I can’t use it much as it’s only for a phone”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f28951f92dbbe6621a17710091e07e43c5a8bea2cee82bcf37d38d776353103c
Signature (Ed25519, base64)
9/ZIILZ66oV+RQX91RZax0FA63RXmgZPX2CHywUE2/OpzkgljasTG/O19owXOtEtLaQHXbR5LpigTnLxMh45Ag==
Merkle root
f8b4f722de05d6805a889681c3818dbde0f5141f0c8463f2762c4a9a02d66a2e
Merkle path
["f288c225ca630ff9c2b2f5f594287a6a03fc2a89d9e932d2b2c9ef04dd698085","4a33a0fcd165323b5af399e4f8a7b8d90c081671a5159952b90727d1837e46f0","d3effd8aae55c14ca312294efba12edb480d7c3c600e18b3fc7030c46688c274","de647153c310085d8b8bd52e1dac8af77268205a575a47a693c32971c223f893","805b1005ecffafa11916a454d01c0488cf8e1f050e49d8ef8c70c67bd0de8312","7120e239a9552ba7deb66040c69f349e5621f5698856a56330e2225539ca3919","42400385aad5f6f3b928017ef47b9c611abead2c3ef63b49b7aeb1e27145f99f","c4ecd5e559f2fc7ec12deb5ed61244635257161a4a6cb13eac721306f8cdbd15","77440d968cc5aedcf806da80c22e831de660fa5355fcc01b211f871c8afa8657","adb8adf7e0f34bf86069f43a6f4a6761d7816bb89c42e7ae5dd14b91acf95810","ae5f6e83a5a36b83d500a89efa021f7054fba2155bd608e7b7f498295d629541","06f7a93baf95476f593ddecfca04f326c9a79ac740314e4fc04c944d1561aa03","55c8c6eecb85583149f9a1265629d0d25028f7f86ae101a9b330baaae0f213a6"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524422814 · entry 108e9186e8c5677a9741…
Expected log hash
e042bf60ab37eb8951abb7a408cc8c7483ec875b9606253deec7a67967130ae2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787192294432","kind":"published-quote","locale":"en","page":"brand:bookbeat","quote":"great app but I can’t use it much as it’s only for a phone","rating":3,"review_date":"2026-08-11","source":"Apple App Store","source_url":"https://apps.apple.com/pl/app/id1056652614?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f8b4f722de05…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.