Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die Scan Funktion ist nochmals deutlich schlechter als die von Datev.”
Apple App Store · 3/5 · 2025-08-07

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2631758752

Proof data

Record hash (SHA-256): 0ae4c3612bc9b57fffe65b8886390da7355f0a7daba321a0940b867119cc1479
Signature (Ed25519, base64): ZOcgIl44+359b5AfTVzDvvVFp4ACd5OWaMoUXP9Izam3j0p+IOX3qpSWnRxOu68Gvr97UoeMjZXPrTkdu/DtCw==
Merkle root: a705e7ecc0d73eb5dcdfda7cc03235bd57a2851764423cac43118a70cc8e7b3a
Merkle path: ["0ae1c04cd65a5318f2a4ff81e6b0b306c27c33a1348bb96073ff845dc0da6a0d","41a4a0887c3c8abd5d845bd5a2096a9c977c70cd7ff38c7a722ea8788f6384f8","0c84fa4ae5b4206fe0eebe0729c8d8fc2c3c49adf7c8ee9f51723e83e30ec8a1","2d2c2eae7d4799ad6dd9ca0a76f0e8b7ab180a96822b062642012dbf82ed16d0","90264ab2e79e9d5387a803b344fec43e124699f2b889f06e762dcf41f78149cf","7f4f7ba83542e094c2f71f8bf4c827cb71551bd136cc5e3c99ccdabc00d4707a","1ac8ac2e8535b7343bb92b08102100e1e9a6fc7d0ae19701041c246097216199","e7f337babe00fc44d8b3acef3ee4598e7ebc1d1cf63d39c9e7db2441a9432a70","fbd91637e8c6fc26dc44ff2c056fb67c9a2763b722f87f922f6d1258c7dc272a","eb2c0df0ce17569867f7fde0ac52c350aac9eca6c7062236340507eafe39c2a6","2eb67b6dd2ce13ead3a6b8bbe53693e9ae2e03b472c64c48d866f83223e73d64","3d0dd87ae572e5992156e110773d66a0f1bf3ed6de2e93de25b994313f23112d","654e62da0e54472b4b5b9c8deb017fe0e371cb74d7538ff4ae544207e1da0bcc","a2d692bf5b7994c15c39856193482ea7c968acfbc3ff4915a355d04b18f7a933","79a9e38b2f2eb947c3bdfe67a6a6b2d9b99dab4a357fdf9e6328275c8035e767"]
Anchored: 2026-08-29
Public log entry: search.sigstore.dev, log index 2631758752 · entry 108e9186e8c5677a44e9…
Expected log hash: b9abdd1fc769097342b82449a3caa919f2ee8419634ee5ba00692ee6314109be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787969636370","kind":"published-quote","locale":"de","page":"brand:sevdesk","quote":"Die Scan Funktion ist nochmals deutlich schlechter als die von Datev.","rating":3,"review_date":"2025-08-07","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a705e7ecc0d7…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.