Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die app ist am wenigsten intuitiv und sehr langsam.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
09553f998d2a8e05eecc039d7716f9c9d1734f8c7131673bfbbbb3c9699dd0f6
Signature (Ed25519, base64)
RNbO8GMEpTg1Na6WKDpgQivoB9JfkT45RbyTAsVOw7BZsXq6IfY58WJCmmkxy32e29y+IdKNliBQv3MC3+EqBw==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["0957e4b84ca1d7c57409f6dd93cbc1f3b7ae198e6d81e7623484e07943b77cf3","95ae949e302d81ed057610bb15a7591c30b9f5c686975f57212b574887ac08ff","bc2c78a49bca5c83115d6b39035ea1401cbfd47e6131e5a15f96de8d0ab43ad6","fbcecc4833d85f5ad3ee7baf7d542f19a37c7dcda4bfe46af2501cf5a9324ab6","b6ec21e6e24898575b1983072add960170596f5aee432666f2e39e4eb54d6f09","86a1ccfaa097cd1c198c6f0f39b0fdd7c44080a41901026efe878ca256b17acd","83661fa89ff8b8939b455928dfd7870ac2a8af512cdd7a4b2ec616447721894b","68dadeaee42a6249964ba48d8391141b5fac6807a3cc94af5a5e98e6d2fb4856","24055b2fca4927181b9b0df42dba1c71057738008d71392346e4ea2738a7e936","40930f3cde9a75980c8282737fd25277f4366f0c1706ac965432e4ad8177689d","0fc39f56c343e43de77d7e77eeb95ccb91e7d7de164bdb53d45451626576c138","908905ccf01aff1d877120de1672987ae5d5a21dd262fb78ac6d3eb20ba17367","3b28c91ed1c07c20e7a9ea170d94b917c6d123814303aca3f92997be066c952d","e448e4cc350a9a69a05538fc74a8236040fbec1cdf0c4908e91135fd4a29e380","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"de","page":"theme:cewe/service/de","quote":"Die app ist am wenigsten intuitiv und sehr langsam.","rating":2,"review_date":"2026-06-18","source":"Apple App Store","source_url":"https://apps.apple.com/pl/app/id583713833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.