Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“smoother and more useful”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 2543154575
Proof data
- Record hash (SHA-256)
f97836be5f584b95a2b551bd23caef57fce5c5895451768504ea1bac61b03b2d- Signature (Ed25519, base64)
Nd7OzrjilT6lqx0OgoEH7Hd02XXRQGjy7Sjey+8s52xYvtjRFZPfyTeGWjwurxFQxPX7ho2S/DRHFZ+8mq8XCQ==- Merkle root
9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e- Merkle path
["f97fd4747cf8823742f55b8fd0ec21a51a05b8f81b6d35d131292e6a3490e3f1","54cbebdcdb0197452dc59ce9f2c0e097f9539c5413de3e15b8f9e57f432b58e6","53c25672e7a9a410a44daba1dbd149eb78065956472e9c10edb00e5670459914","da2c41015d0443ecebcf6fc35049451f3f15f67fa738ecaca079a89e19c85e0c","e751d6dc82e499319001d4f12e3133b98081cfefa3344fb729f178e393daca03","4e4df7d7dc1d2eba0b20646ff020473c59a1e0130ddfc6a133d8e207419bfe45","a3f3d3efda0bdbbaeb3eb0062feeb600f121fcab280833cd8b63e323ee02b145","ad1e1c0a527972331c780774bfdb07f78c4491877cc1a94be1af634495da1855","d348eef1e59a4c62e21cdaaca44d83e583aabe649afd55ff54c4859d179e3a6c","95a03497af373579d9204fc8204f296be508a31ed11f468577ae744069de0a99","0de9458eef5c5fd72bd101e9230b8be27409babd0b4cda862df667f0aec8c53b","0a576056ee16c853973c1ae5f2e69eb8307a6c11579960d3bc89f852486ab500"]- Anchored
- 2026-08-21
- Public log entry
-
search.sigstore.dev, log index 2543154575 · entry
108e9186e8c5677a0eab… - Expected log hash
-
0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65The log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1787284115102","kind":"published-quote","locale":"en","page":"brand:personio","quote":"smoother and more useful","rating":5,"review_date":"2026-07-24","source":"Apple App Store","source_url":"https://apps.apple.com/es/app/id1470197212?see-all=reviews","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.