Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich kann nicht verstehen, wie man diese App als gut bewerten kann.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2633073422

Proof data

Record hash (SHA-256)

0ac2825c0e9e2587f68fadedd0832fd88e952bb8d0a5b143adbc5401a2e7f31f

Signature (Ed25519, base64)

b//RC8n3i1W+o+xWRjuikke/dVyF0gJP4B9RKm+rsY0elxSyn10QN33yVECIkBFzT9D+g8DDGg1GJBkSgOgsCw==

Merkle root

16602494b0150927456bacf840c66c2829061129493b149d2eb1d2b830a96076

Merkle path

["0ac2124f26ff82825c23e94171a030666383780e1623aa5630c3579777127879","acaf8d947e3f1b2ef32d5525fda88abd121bbfd67df93e56d7e1829a141bf739","9cd7f9217441b3f83310baf14f8da49b7b342aa673216ed7b6ba3f937fa2ec6c","963a6c5c86290446f89ef7f36627090dfad1d7ce5a6fccb8dc77581f62d67f27","cd9d41e9a4d4b4c459d32cf3db45dbda9d034e950ab8a07b7e16543e8c333aa4","64031dc84a6b7b98d8adf6bc32ada37e657f74327450a4934c1d074308d6f465","d133097cdfcbe51008d611c358561790756779abcf3fcd078f28f539d21c3aed","7993809826129e8a54ca7e1f2833e8892d0e7ee1732f33ca921c021ab372a1fa","695b0c4faabb4f3af93c9ad930ccc22855cc092dffd7039fcc51556d27015e3a","7a24c3ba741deafa204e7a33bdfd52bff75226609fe127eb39ebf5314f0b3ca6","4f3c1e94491ccf9c16ed88705a353fadb140829b4c7f7c3685aced2cd22a93c5","db1731862e7d5445fec070dfdff6a2b596de8bd36e63a38f5f93dcd257cc5fe8","0b09f41848bd4950dac91b8dd636a8a441110dc29c08b2d067d836a10f86d944","457ecdfcb20ffb5e8f233c3baab2c78e4e21702bd9762a1a6284303206f7fdca","def14a3a74e6ec61145828002c08bc990f2a49ba097deeca3207ebd94183aecd"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2633073422 · entry 108e9186e8c5677a2d26…

Expected log hash

46faf8b4cd028552483e1b95940330e61633b944c66b0bf8d60512dfbe282496 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787978478639","kind":"published-quote","locale":"de","page":"product:cewe/karten/de","quote":"Ich kann nicht verstehen, wie man diese App als gut bewerten kann.","rating":1,"review_date":"2026-06-30","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id583713833?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (16602494b015…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.