Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Was habt ihr bitte mit der App gemacht.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3123908662

Proof data

Record hash (SHA-256)

08d4d80a73aa266b42589107d5d15ae9547dfdb2aed5f78d6de165378d54e720

Signature (Ed25519, base64)

dbRfyOGumJWYOKYsf9vGa8YimszxnaGRklLSpLwiQnLax2bbPsA03jX6UpbnxlnAUMu210T/zZjcFgnUcgpRAA==

Merkle root

c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3

Merkle path

["08daa57de6e43e05665fc5c838e1c27da7bef0a26b368874442ad877a0b27610","7e67f97baa040dbdda85fe7f06a831d124e4201d448ce13f88109af63f775d99","0b02f2fee786804ccce6a245b34cb6b67d1c53567c75d4a98e24dbe3fc820001","f3b29388fa4f5801d14df27ce1f572ca51231236e2ec0cbbc5f98f6635592edc","89c5aa6c142db651692c469b5e8fa3bf827c3f1437e2600c0b044958c21b7a65","cbc07c5610482de19510b06d5482ab1bea840df317a32603d342a9f8b4a2f8a5","c41eb9458597354967c71a2fa46c957e9f85d088a7dd02c79ac6ded724193afc","6be16c1bea17939a3440498489f1ca9653232115a53b1e5af3a0f3b27dc5052c","c07b1dd32c288e945bc6b3648d26dc2250471a56ecd4b1b786bdcc6d14fa53c5","03fb683d6a674b9a56bc2ed487fd25bc8651f0b1dd8fd9be8f665bd79a798104","474e2550096eba33e1537b293cb32465f331d8c9b43de62e223a8e96e58c90ec","819fa491974273a7a11f5a702a87a424f5950ee00dda5f56978785f4dbde325c","6347feddd7eaf9469d389bda6e1b8ff87765f8c85d403613f77df274dc0914d3","60db5b960c74a953fb3ebb541be0d84a0946a38e137e13155b739ca3fdae1b05","8308334b0715cdc2685afc133c95aa85c9b86c8dab9c8659092b74cf2783feda"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…

Expected log hash

5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791348381030","kind":"published-quote","locale":"de","page":"brand:sevdesk","quote":"Was habt ihr bitte mit der App gemacht.","rating":1,"review_date":"2025-06-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.