Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The web portal claims you need to open a time-line in the app to start any treatment.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fda7d511293fc1fcc0fcbe88552df0c063ca5b595b09b4a6842996c7c98d771a
Signature (Ed25519, base64)
HqOSE5elMet0xa2Mcir3Da5wXom7Qh+SmDI48u30WY8y8iU+xjEYp50CUccrbq6yHOXXpD1S7k1DQbjpttfaAg==
Merkle root
677e672fa444dfe5152ab91687c577772e13723ca441b5c8063508daedacfe44
Merkle path
["fda66720fa58cd1f2da6c9746d4626d5709cdef05f87901655e48d8089a892d3","1467e8f501e4766f5226403acfbfe4b6032d4fc779679c8caefda7bbd56973d5","58a8a68b363e68430a001b6b11d573d71aed6bcf7a866028752b582abb5e9306","6f9ceced01cf0ba7f5c13c1185666bd4ba180264a6b8383b8119b1757847571a","c70188441cf7f425ed152f1b438b9222080afba04c5337a1a1f5b2ce52322312","26bbbad8b3c70da718f1db0456af5d284e14cfd58fd6446201944cfeb258845e","1012bde70258ab9a43c19f72150c58e6b50b7a30de2f8e940d628fd2de9de16f","630b53f7d3fce0a3c51590125937260d0d823dbda1453db6f460487b858c23ca","934ad6c6615316e81091893f266a20d0b5b2e5eeced7e24dd45413aaf0918fbe","3a1ca045e719b9845065b909abebfa26562d494a17cc4faec3f0a8035fef1300","118b716b025dc4232d96a149ea8afc6f8aea88d575416e5478200896f6645e29","9dd4e89b99569bec52957a12657064e8f629f283cd7cc3df25b3ef9a4ba730c4","5bc7e6567f0d1b99483863b82e84c2a2697639aa33aebfc220df5a066aa7a9fe"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514013184 · entry 108e9186e8c5677a6b00…
Expected log hash
a596e5a342226b61371cdf76b5c8be8e37a3d00e7ffe8f7b0b550e1a8d1459dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787122978040","kind":"published-quote","locale":"en","page":"brand:css","quote":"The web portal claims you need to open a time-line in the app to start any treatment.","rating":2,"review_date":"2025-12-09","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1133551270?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (677e672fa444…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.