Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Doesn't work at all.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
facc8071e23a7a459ec97c98b93e0272cbf7ae55d40e2d72c78f89d79183829c
Signature (Ed25519, base64)
xf72YZCEJ7zZQtUrJgO9vRtgYLh3Jly+ROTcHlbIGXGo3/CiWELkwEzJeJ7Oh7Nsg2Nkjgijnza2DGzG7q7QAg==
Merkle root
3030a3ea5b39192cafd732e0b397cfa387f40a2253f2715cd6a4d9d218dba468
Merkle path
["fad3f2570e37f93374754c9c66b03e30b6fa5582d68553e0b98a2e210dd7ae97","3b77343978d312be11910dcd994d2463674620e934624c266a7f6817cb67f9b9","571c33f1ac5024e18ea925694aacb981c7fd2a0a7f4a45991fb34bb960c2b080","682d3fb55ce32b76f277fc78d2eb2a7d517cbfcf4a3923fb60e0718d2b11c0dd","9fc1de60278d04448c2c84c7f7039de8ca4754ddd882863d98502700b815ba6b","8f2570fbcd0f0bf7a28349bb5b6814403b7428a00d77b79061a64ae74b508131","9d540c782b049a9f2480a140d7b79bdc82fe6344cab01697e28cff789a20655c","13bd2b9a776ea87ec6c9c1c6f04bcaa657fe057e12f01cc0f7b244c306761907","c77102e82bddd9fa4af27e97bed71aa65ce1085d963131b01ff0fff17496e232","eac3c561f4f12d73f47be8f75c4bb031ba274a760f43a7a0ca3e2d9ff73a2952","2f6e1791d4f1c5ef93c093dd0347c707a3bd45cf36c7bd81424f8f46b7609620","0ea42471057aec8c3ac4ac6621fda487ec59b98607af6dc1ccc9c03a24175618","1c0d046578e667374df87204533133657b4a39b1566c3798d3efb2b6dff73361"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514446349 · entry 108e9186e8c5677af084…
Expected log hash
901e903dca7784cbcc0b860ca8f2ae684aa8c7d566efb3654aface7bae409ccd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787128322154","kind":"published-quote","locale":"en","page":"brand:sunrise","quote":"Doesn't work at all.","rating":1,"review_date":"2026-08-10","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3030a3ea5b39…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.