Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app has almost no technical added value for everyday trade work.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256)

086ed264f856c9c3c57699dc1a3ce03cac44be77bdf9e479be990465814df756

Signature (Ed25519, base64)

g6CkCu8lTR7ckEhixKTl6uzjdEM/AK+ruVDKq869np/FfQ1HhM7GSJXEOggN2ahxkqp64sw7fuwrhRiDgwpLCg==

Merkle root

13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725

Merkle path

["086e63c1fa9cb96854b28b16eb1259c2e37152b638b8556a8259aa4ab95c7ed0","f3a52f8b9d175abe5f9ad846d98baf81fa4c4942d724027ac750c74646cd0f25","da10f8de7d1e8730071d1547fa8dfa836b289eacd219c2edc481b04549ddb83d","48b3a0baefab9527012de2666e9709e766672f5a5971b980e44d96cc8236e58a","8166c3b55b7078c471008b0a283dcd17524a2ec4d64408a4434dc2b61ecab233","f0f176ae934d30a5b12bb28a50155cedab8192278a15c0ca561bf85e6fad0f7f","2d540f4e3bd56a3fa0594b827fe837c8a3d26a237aef2a6c66dcd3def0eed146","9077af3e0e27d47c4056565eceab59da785e11ae8097f2efaf96f75b9ab34644","9d052e297a09586a147d01e363cdb6d155321e84f52b395f36f5273e21965f03","221007517cfcfbba611318115aab08626aa8053e6f55b13b7b932019c2b75664","42417d6cd74e03243c6c951c6aa44a777be4c35430d855e320afe27e4e81e593","2c9dd994eeca2a675ffee89c90cc35a50c3e368f75fb76cb1146b2763c6e8b7b","bb11664011b9614dc8d7babf8aa2564d8b3e744fa21e495188f6f4951a909503","9c23963b54ac666752e013737b81ec6a31e3529ac67f9360ca3657ae9a4b72b0","bc9aae2a90fd8d311435fb1459ac7953f7f2923aa1b697bb0b40101796e3503b"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…

Expected log hash

44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787279544668","kind":"published-quote","locale":"en","page":"theme:sevdesk/ordering/en","quote":"The app has almost no technical added value for everyday trade work.","rating":1,"review_date":"2026-07-21","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.