Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Invoices can only be marked as "paid" during the trial phase”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2685518693

Proof data

Record hash (SHA-256)

08306ff002027e7b080c4086b3051e4ac06023ff7b86f2a1ee7adaa214f8c993

Signature (Ed25519, base64)

wyK3WvWts1JB5OHHy1vg7IZ1NS6Qsn+mHm0ena65nat/88wOgVxXGOhB5EtXpFjLX4++G091NC5mhcqNZQ7WCg==

Merkle root

3750a5fdf1ed10aa252575b51301fecdfc7c400fa1cc1f2ff8335245da43610b

Merkle path

["08369655ada5662ea34c1dcc399814edfe15b664d795d44cc10d0031a640c0fe","6b765419d1750294ea38c608f83d4df4ca84031282375779d23242169cf64c5c","eef5e8446912e5b26b4ff626d7cbf03519517c69e8a9fe123b5aac90c9d84883","d9c30cd818e7ccd688669a554d2c03480f78e4063494c6b528e2ce8049f35481","bc22fcf2554f4e916cc6f0f1daeb99591e40d9c120b10553d00219f26d062fac","d8782674f76a8fdb0f04b7618d0d9dc32ff6c4d9212637e6f4c062792a066c1e","b1487d658672d7aeb0352bfe6462660847dc98c03cc0e98f6786cd58b1e54390","659387a5b193065aa92f5b30a94545b82893799b3f53f188b6d9da2452b3c87b","ce36c7e3c1005603e202cb260d4c5bf915721e5711b5159ac52b0158697670f4","b5eabd61564ba099b4b3f15598afcbf8481d616bb1425e398e9398d454710f4d","f5baa99fa36869163efdcd1791bd92133b531bed887ec8c649bb552359e4a97f","5e2a99e2c7e1f7f9776617569e7595cc6a8b4704e51458100450d820a11490be","97a8111d8475641d358c235a27a819fa77f45486e07258eb6230f5b4399f78f3","d3f60913f0f2261af2a1efa087a29b863f258046202db992bc2cb4f53d0bce0b","587eed16c1494c5b5ed63db0c99eac20f0d71c9f7de0d416e769324bf14ca737"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2685518693 · entry 108e9186e8c5677a840d…

Expected log hash

14b4c1422d781f8c06152e5b2b6bdb741e926e97bae5efd73712ab8c7b50b252 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788352576042","kind":"published-quote","locale":"en","page":"theme:sevdesk/billing/en","quote":"Invoices can only be marked as \"paid\" during the trial phase","rating":1,"review_date":"2026-03-09","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3750a5fdf1ed…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.