Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I changed my email and passwords”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fc5cc1be75838c2f5badc33aa2abff3f817d21375839095bd4da3936fa004cb3
Signature (Ed25519, base64)
7kSqgnLs7tOPB0wtaWaYEHf2o2MF1AOJGdgWRd0m0Ff6fC3XCa1qP4BK7wlMDMmd5WaQiGdznwtWYO+AkYnCCw==
Merkle root
681242bb8cfa94d3b60cc06de1bbe3e5e124dc1675276b11df0aaabc9faee58c
Merkle path
["fc59236723847016de2ec82777dba9fc9de7f6d23031fbc895495f18a8f8a660","5f76c8efb7802eaad33d4982a228b47dff400d3d477332591585f0acda5a5bd1","15e20c30d4f141c4e8f3b35b7c0287b3c310712be1aef6f3a779b58cf73609a1","f9a625c965f8133329b24f592e857271326e6c15d5bb0d03a2250db99e7f6270","4439841441bdf00af3f71eb107db775e6c0aadd971925b45ea202aa707bbea24","f72347f331798ea8fb181e5ecd8e0fee44cad1ead39600ef5556069b6eaa9426","2ad302e5dc007243b4f60fca4465b93d158a13e20136e6ac52cb46da8d756493","2d93ad10d52012346cb69882723b31d002be20716d89b9b203f22bee2da71eef","a8de74dff96493082c66076da18f778870805acc08ded2c754453264e6f51501","e054afc74577ca0aa5e7b52a63f4e70bd88a2709271dfe3ae5f3639376eb4006","339dae50e33d50aa0cd1dc447432aefad2a6e04bc149cea692cdd6f203acc133","0931601ab88b17ced10d210b73b69d45855330e2f7d04827af69758de2cb8cd3"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542879916 · entry 108e9186e8c5677a2329…
Expected log hash
8337812f20bf1207a3c96eed87ab975d7e92ac1421dcded24507b32e456b788f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787282728402","kind":"published-quote","locale":"de","page":"brand:nitro","quote":"I changed my email and passwords","rating":1,"review_date":"2026-05-23","source":"Apple App Store","source_url":"https://apps.apple.com/au/app/id1608616539?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (681242bb8cfa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.