Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nichts was im AppStore abgebildet ist funktioniert in der App.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2483496382

Proof data

Record hash (SHA-256)

064e1758debb2ba62e1c545a182eddf641a78e0aa32bc5edefcd59628be29539

Signature (Ed25519, base64)

SW9XJnTfXQjbrGkaWjyT+eUzvMNolAQYGDdCw51TCEJwlifFbNmEIIyKKrPOVSY6oTR08k/Bu/yoWdq8iWSdAA==

Merkle root

8b5970f4b146530c341d90a6af2810c5e81de90ff6866f5f7ab1feb7b3b58339

Merkle path

["06500584e5861a6de54aa46aeb1fa532e79467d8d8c2a6a88613a3732acd2e31","3f633c8fedca0b7f62c6d3e93d92de39d3a540c16f06c661c6640631af3ffe85","ea550822eeb137bbc99550fe754d93292779b2757bfe34b770ec9845f32a8ad7","4ce48341aacd929a4b002b6f2d6aa471afd7b700f8e072ea72c4a1fa4ca67c76","ef1b98e683de82dcf8f032f256ae4f2c18c6725055a0c503a05ae7fdea63a6a0","ca254aed39b6b603c740fced4ccd95253350b768eb0970333de5da06cbda0fd6","da8e9375cbfa4ad91391a42b4d37906816262acd355e3fe2aa87ee50b7dbe7ef","f095b125025ca644cf3e6d6f3fedc81910efdfcdaf080450e276666e570f0b5a","5384db880600d9597664ce37792d442283a2f5d294ad4897948e7b7d1e043633","efbb3fa1e963868172160e06112e9d2f7a695be56399cecc31bcb5dc3fd4f4ec","ddf6a614529feb1d664d5804a5e7f29b205d3e127a4ee07a4f8f2f5e172e2d74","a5f9e9776da24cf1d72732dba510c24b49ca2ec73ff090e98d3dde783aa83a64","8b569dbd35e16a3cf6284fcb35d07452e370b6f363612f06f907e8dd9c1e09c5","e10016342536fc9141a66bbc7dc7af86f923fa1702e2584c59b9c89c4f07f20a"]

Anchored

2026-08-16

Public log entry

search.sigstore.dev, log index 2483496382 · entry 108e9186e8c5677acf0c…

Expected log hash

9e156a9df8edbfe61e2aac6bdc3033ceb5ecaf971b297c4e0a7645214890c65d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786848988221","kind":"published-quote","locale":"de","page":"theme:sevdesk/quality/de","quote":"Nichts was im AppStore abgebildet ist funktioniert in der App.","rating":1,"review_date":"2026-07-01","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id731738076?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8b5970f4b146…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.