Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Writing invoices, in particular, is much easier and clearer.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
06cfb2cfb8745020301fce1cef59d42fdf9f337e333fd2c5c8a5233e9ee22645
Signature (Ed25519, base64)
oke01/0jXh31uZR+a1Hxc1kQb1y5WaF6Xgb+lKetFYtu/zP0opYxH29Esjv/w9a0HNKKzrdsz/YnCczSJBalDg==
Merkle root
acdf1cdd0bdd2a199677e85dbc5991dc48c1e518ed6d2c5233af5991b4186e6d
Merkle path
["06d984ce4aa19e2562a4c7d040f72e81716cf8f8b553ad2f971ef2086fa74456","26c04d35d8468db43ba42bbbc77fba4a623feb3a6b84f480743de9922dbbf78c","637f3aab91f00ae60cce5eade07d06ae062d85e56c3cd49a09c11d19c5af48c1","45fdf1cc6d64caa80a7041aeb50d2943ce2d5f5df5bdfafe7ecb95e8cd66fe13","06fbacedf0fe2fbf36784fef5dd71f3f4c944e1f41d32ca64516698325fcf148","09f39d49a5f0f0a0aae45bd1645ea7206073dbbdf158079daae3d1f9e6966e06","367e8064c5ac7d8f0f4c88f134f74ce2f0267eb335cb97e26e7c2765e3865f15","94ea7c22954f90a037201a1d40dc7526b9aa4c7ecec45e801dfd387ae9baa704","28c34fa165a059686dfc8ae858e1393d25089214ee1fe1b0f2afecc1803671e4","f58b0a6ed6ae192d6f36206b27e495fe71af8aa226e356ab6d878f3d7018deb5","d56be8914f0f8cbe5274a96fd7fa8816cf0fce41fc6826030397e8ba6c2c1c27","e6d320b1a1c165cb3f510accf419016e8f913615cccc12cf3280df561ab3fc0b","5be1ed0db4a168c968a9338cf99a259771d41cd5263b972d09b2723267155cfc","f88b7eb537a26a67b92d1223a237ed8f66b05121bed134a4e98a9efb344eda0f","abbe7f57eef4397ffabc67ae858dc9e10b74d761241655f8d4d6e91a3ed19782"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657398434 · entry 108e9186e8c5677a2042…
Expected log hash
654fbf62fc5d4d889ecdda697456043b4d29831eb78c01e70ea2a4db22de7769 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788145268703","kind":"published-quote","locale":"en","page":"theme:sevdesk/billing/en","quote":"Writing invoices, in particular, is much easier and clearer.","rating":5,"review_date":"2025-06-03","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (acdf1cdd0bdd…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.