Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich glaube nicht, dass irgendeine ihrer Apps jemals ein Update erhalten hat.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2683258276

Proof data

Record hash (SHA-256)

0b52e7b5b4a18123797bb7c4e1e2d11c805d97bd08d9ba19a99a9691bc9a090d

Signature (Ed25519, base64)

SXIeToVkmw6vVc/SCAIsFa+7AONaah/MKg8P+dpNuSWfVyJnY47H+A5xc6IrJHwnFhpKTPPmuEX6jbMnGR4KCQ==

Merkle root

1b4480a4fbb367e76fd34ca26880b5c46171f974cf3a94f9b036b42e01723c56

Merkle path

["0b550c6f3e6f41f88e84bbebce12853400bd5ef0cbb61aff9b5d01f053a8f3f4","1931891a564c70050cfdb1e05395d54ff010ec17708bf0c184e93f1f591a2f64","8232c5145a7403388225fc553455a1f874dd889e853e9e3587ae171f9aafe529","9824188ac2050bd1b0efcc27087c45a921a4920efbaa57f97f7d3d12f2043cfd","994ccfd7b8a1d0ae304ee706a728f0aa7bf272699d37a2dc6ca50254913d804d","9c803a1bfc9db8add4292caa51f9818b259c94af7a824db76968a28148c6ac1a","52ba39bdf1ba281c10ccdc769e9bee60250d77aa44a4935bfc751405398e97a4","c01f40b4c27968b0f3b1bd7b5efea325b30a0bbea2b12a49647cf4e081d650e0","70cf00cf01fc41de5cdd357651205a037942ef06cb67348d7570fe5adb0dabdf","71c055f36440b8bddf14630168e6e74207f3cf580b7938cc56a94c438a2f6cf7","04aa849b4520797fcf995c39b1d89cb59e40fde751bb15dcdf28a28b657641c2","e87d3f640108f36247b0815e0b898eeec6b0102410dfc0c66c6f5f34b114e4e9","9bb9face21b64dc4548596d6f0fe4cf67321749c83227ee93ed882f3aa170652","e7218144e850bd19a6bceecc50f33cdd16123e2542b211b07ffe285b3602d2d5","26c4d515b1da79ddf02519980ecbc6a7fec0326ec612e5f075735f461991082a"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2683258276 · entry 108e9186e8c5677a44df…

Expected log hash

eeb02f3fc88cc5ba2c672023b294d6863b311c6353fa3c9c8dfe9c0b1e584208 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788322016973","kind":"published-quote","locale":"de","page":"product:proton/proton-calendar/de","quote":"Ich glaube nicht, dass irgendeine ihrer Apps jemals ein Update erhalten hat.","rating":1,"review_date":"2026-07-22","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1514709943?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b4480a4fbb3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.