Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Only a yearly sub of £21.99 with no trial period or monthly plan to test it out first”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fb1fb1811d621dbde83c2c040536bd07061be6ef17c11c3a0ab11beb029644bd
Signature (Ed25519, base64)
KFKgym2EgNLNjEyUsZqSPGzhMkcVPyF87wNMc/l2HPpvl68vm5ETNVQaeKnpe9xSl1D6awga8U8x5eCPaZMwCA==
Merkle root
80de158564b7616572ca0c0059561f6ec90cd5bce49a388e61df989f3f6f2a86
Merkle path
["fb2405d5c874bdbf724edeaebc2576660f9f5c17a1c610869e0d4e1ffed7298c","a6b3b2be14bdcffd775b68820a421205acc098aef4f7712e245bd23700f8f649","1f02ce983456a13440d257f5f4fd5eba47d598bedcc9b9d3b8cfcc2e57726bd2","0174bf78d5f58db9ec4e504cf4ef72016745930612770ba8498ea90f80fa4d00","8c54f9f723f5fcdeca4cefb5e047fafdb238d48a2a118ee06026eb0dd41e4116","78892d1bcdf9d1daea02819eee1af49757fdbe24a09c1e8e175b8dfe51c44ae7","0b719cd1afc82ece20f6781d9bc52e2f5cf1d080c94483e59e8f17df29d3a8cc","6ee9e8adacadec5c2594b5e1a0884b93b8fa61704dea6aa3b994135d7296df6f","969dcf282b152a88fd88b645cf48d876cd7cdbf30ef77666bbeee83acf98877c","3b9278bcb2f17c2351ea80c4e604bd09d263ffd56c2eb7b60f5e8b5b213e81b4","7dce70284764eeb79c91b9d9897b62a39b191c5d0bad82b18667d2d644a028f3","3313dd0f5efca87d347f162963e654f8f97b434abd08d651e0c6d5a5221a45dd","a005037a25946b6652855fc44de7f4032ae34c31430074646af4b1ad906e77ec"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2513802575 · entry 108e9186e8c5677a9216…
Expected log hash
5899b5d0ea18fa3c879147333708054c2e3cd77662f2b6f633aa3b5d5512bbe5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787121142818","kind":"published-quote","locale":"en","page":"brand:tomorrowio","quote":"Only a yearly sub of £21.99 with no trial period or monthly plan to test it out first","rating":2,"review_date":"2026-03-25","source":"Apple App Store","source_url":"https://apps.apple.com/gb/app/id1443325509?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80de158564b7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.