Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The focus is clearly on margins not customers.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543857133

Proof data

Record hash (SHA-256)

f75ece361bc7740a5455dd685ed7bbcd810ceb0b9b545f70819a35d08f012ab4

Signature (Ed25519, base64)

+jUokonGGoQUH5EqD4JsTpCpOZa6bjdlB5bcpqpxxP0dryYuriBAN4zjuBGplfE4PT+OxyU2NUGFU9WPgE//Cw==

Merkle root

cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c

Merkle path

["f75638cbca0d374bc8fcdb24f149e16b899cca15987e6b292af5667b7b60729b","fe42ee2dca2df474537db0dadfc43709a15c2c9e2484ce5460a54b0bbf576a7f","44e5668851ec330dde809bed7a6a23e397b5b12946cc294432fdcba2d2c29b05","b4389371dd2d8d5b1cb0c26103a2ad5a25591e21a84f9a8a12b2e1d54828760a","fbfa08a1b843acf57ba4582cc0171d20d115a48c13130bc5a8773c7d128b2bb7","b5b4409d7cff2595f66b8654fcd5b493c44714142d4af84dcef256aa230bc722","1a7f0b4af1f5ae73d1d8bb15bec85fb325db2106595e0a4396309b28630165c5","799c65daeaa491faf01c25f192e7e0cdabf27ae9147cc357706b8a2092fb66cb","f82c776521d1abbde5d5bed0b480b872438b76e6d1566ace26711fbf2e75284e","b282c644368424a4703a3c55f90b43564b2fe34e5ffd4cccede2673d849bf9f4","8eede5eaaaa39aa311d5d82caff567170f05a3f5da864babf80accb43c38ea8d","78caf62780a7cd32d3591546c7643819cd8e2ced71a3bdf696f7fa96ed9676b7"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…

Expected log hash

d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"brand:salt","quote":"The focus is clearly on margins not customers.","rating":2,"review_date":"2026-05-16","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1258680285?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.