Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the app will not recognize the purchase.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
fe9b545a56bd3dbb225b02fb4c195aaca7e54b0fe412068f02a093a07013eedd
Signature (Ed25519, base64)
G1SFF0jGwtTcL0ZWYZpBusLvS+4bXTxvaQ2G8qff+609Tyxd9T4T75k85B/KtIyjvHMo4HwFdJuNHPyOg5ZNCg==
Merkle root
689da4f5bb049dceb797a1ebd18ec1f343afdc6a2eec17587eed167cc7c21a02
Merkle path
["fea1530d8ee09455ccaa7c08862caed60e8b463eb3d897e9baf4aebb4cca9ba7","ab41860a06352d74ef26ad174a5105421e178060dbfd91bbf173f20d0fe16348","db91fcd74a24b07d988a91bd8cb274f5d3d8cd679b397d19129c55247298592f","7d34d574f34026bf3984c209498e8cbd569ed76a9955a2feee452ea2f8da253c","e7641b1bfe60482b28a7e51cbe8618812772eef12ca089d2a72b54f56d097100","84aca2569eaa9d07a51106424621cf02596f9125119f0628955e9738728be11a","e8ffabe7e2efaf360f6c88019dc980377b2116840b5ed614fd8de74b2652b635","7ece88f69210284f1a9c61f339677571eb82b3c4452516dc638e16ac50f94ee8","8a2794174ae52500b7687adfffe01ae0ebe2c891e4701b2a5aa2f1dfd96941ef","28fac88395840edd1416af9599dce699c17b18d4f2ffba7b9ef3e10f6c4959e8","64ce137690e41e1dc54aba8cf0329dfa7c38085b5e0b6b5b789f5b6106574143","cbe53573bc503d1fac8b66c37a5c149ad9dc05847ed30843f48702f08cb1f237"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525430207 · entry 108e9186e8c5677abb21…
Expected log hash
68e6afcd6c232c11ffffa818a4cc0c5faf1a86dd24e2ab2a7811fa1f4f43bec8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787196781193","kind":"published-quote","locale":"de","page":"brand:tomorrowio","quote":"the app will not recognize the purchase.","rating":1,"review_date":"2026-05-03","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1443325509?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (689da4f5bb04…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.