Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Require signing in is an instant one star”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fe8372b440dfb837516e58e0c0136f1e0f93203a1d85bedc45e1a2df1b563776
Signature (Ed25519, base64)
3bHeFqUuv05yiy5KXzZ8+jFDi/GcQTknMH8AX/TY5ITeuU+hVp8MW0ZaRBMtmZoBSRkV7/R9bjItUxJrbLAiBA==
Merkle root
0148d24ff6e9c2ab4d5b200cf436fcaf811faf144951e67c277e5df63df916ac
Merkle path
["fe85376c6deb2c8f28959503e67b98926d5fa8ffb0aa85fc805aa5125ad10c37","dc7a5c57e55fb401df66f1c78049ac3edd8be05a9d3ec10ad86462ca719e20e3","b3389f7f70abcaf08ac2f77b8422887d6e2ee8d6a70693ffbbd3facaccb2a017","284c5972501d36e69df6437fb51a6e6a4949566a18c24b586551499ce37b1cc7","9308bfd01231482c33f1c30eef704c1c2a095848c25885f1aae31a26786b1ff7","8960c6aa5dc8ed9fe999c06fd09227e37cca0567e68896e51107e64617c59d01","e737ebcbec840ddfc891161f231b3f02e16c58b3a661bf6dfd62d87b311c58a1","1cc0a6936f6173017424ce85ad86bbb50ad6abb81fac9f2fef3962dd4a57a157","df28b55bcfa6daa9ec1c4b5b13847cf3332e6f18723eacde56acd461c89622dc","2965caafec473553d863a1d9d16521cead726e55854c3847e1124e0afb47db53","4d176cf158de8f5a487a416b919eb0546eab0afc3a202fd2e1810328731c4e90","592a58b5922ce02accea2ac2972c6a09ded44247063628a784a2e2b8f673d019","42678403613f22f6fa71f15c7dfaccf97b632891788fd8406555c3756fa22361"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2513934798 · entry 108e9186e8c5677abbfa…
Expected log hash
4398d73a28baccf419c99b11cbeb8ef2e4242701bb0cc17960e1b5f329faf480 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787122088277","kind":"published-quote","locale":"de","page":"brand:flipsnack","quote":"Require signing in is an instant one star","rating":1,"review_date":"2026-05-20","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1470387210?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0148d24ff6e9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.