Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich habe eine E-Mail gesendet, die nur automatisch von einem Bot beantwortet wurde.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
08f3c456c1b5fed92172cd18ee61851c7e9269928ae584f1006e0bcbaa024d0a
Signature (Ed25519, base64)
Py9mKAMu136cM3A0cKw+PgEqZWBZ4CZRWAPA7qJG3KyvzEY35+lamkDz+tvgDh8XXG539yXIpIjpeld4Fw51CQ==
Merkle root
405d85333c1c03a7ae86f6b232380a3f0e8a386e4cd2c9bf5bd2480ae9ba2988
Merkle path
["08df95a1422eaa0d23ceb0137a4f2e8d90e64363ce56a9cb8110c202724e2c87","d7b5b3b9a6f04f901dbf23919e5042c96c606d850c4d8461bc4809e14b0094a2","68814a0ce5d0c8e6bb1b551a0053df028be42e6536bef1354f931245b480df28","ced5f203b2d93aa860b2dcf99717b123f032d5cda5983afbaaf5793e2add0035","53f98887c4fdab9422a14e80174212f87dd2ca986cacee7a8c9b1beb39aa5c8c","3df324af711b4fad7ebbdbd5494706478cfa79682ed5565ae4e0759780f2093a","8d016f9359bea7375301f431057748b2a0cba120fff7a38b5f2240c17dd50aef","3035bdd2cb5a4a1ed7ec20abd0aa72ecc67c6387c9e2944e0af54442e5766be1","88837eab09867fb3dcd47b2dde000effc38722f03ece0e7f20611a0079a3fddf","53166ac6aa2d72eed2c595c332cae2572567bc4d29a0d413a0bb93a319bbf727","9042b1a9a265251aa85b8f7a8cb217e986d09163da8aee80a3bf1f89ce1ddc8f","786bb926eb6a5735d53cb29a06ff3e65b4d29ef8fd39d596873e263e6e08aa4b","19a71f7971408d12f874f3ea09b06e4f9b44cd26f6dbc08d0466f033f9881220"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3668983302 · entry 108e9186e8c5677a323f…
Expected log hash
f9f0f1b08ea9ca6d951fb003d493c517d980826708a70b4fc99c8b9c98e286e6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793707617662","kind":"published-quote","locale":"de","page":"brand:proton","quote":"Ich habe eine E-Mail gesendet, die nur automatisch von einem Bot beantwortet wurde.","rating":1,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.protonvpn.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (405d85333c1c…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.