Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“einfache und intuitive Benutzeroberfläche”
Google Play · 5/5 · 2026-04-01

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2682933759

Proof data

Record hash (SHA-256): 0ba50b04072e5ca1bfc78505e6a1384c0b5886bd3206cc2172765c9a57769d40
Signature (Ed25519, base64): uEiQ9V3dj4B1Fv+Riu2cJXDvGXaHiqFRLU73nMab+OT+E/4k/9jIFqTlHu1QdSCv/ZuYPG/f1RwYk9t4bUrFDg==
Merkle root: 4fe8751e7d70c50e0cd3fed6e9eeb32edf31f624f79d82d9ec3817eddba7a9fa
Merkle path: ["0ba67bc749291d70e1e5f2c4d0f083a13a7c2ec116c9adb1366efb57212a94a9","acd12c8c04e54b80c6b8f71157b0c7424f05a645918814dcbd3c0b0bc8ed0777","7e382422bb7e99b985246a6b632b1be291055d3fb40f414c015160c52551dee3","489fc8de978b49d47589ff97011fa11c27342392ac9ab3afab17ad966cbf2ab1","d11748b65432c8b668b1fd2644f25e647bf826e57fa4c492268a7e3d3a3df550","9bd113d84c54d96b2711b8f0287c77c94dc31575a7e3fbeb4ff81ba017dc9e99","caa2dca2b0f273794dde971fd1e4004ddd018c567b1eab62a6218ed9cad5ee09","8c70003eb048e836851c91a113ee51adc38d9e2079582bf48e8450c71b1dceaf","2313c9e13b4be79f8ab5e30e6589b3411a11a3cd13c581392d5d42a79e5ddb6c","8020a2caa3e3b19470b809688194bf334cd267731bc763f9c1d58b3bf2c03b0c","c061e77f19604bfdd8a993bef0a6682b48bf319c274e699219e5340fbeafb50b","e156186e749fd94aed5a129f465f57a129de76642c7051b32f1250d1a8accd6e","ea18abb121143b3c16bef9bc5a13c470f569c0ce0991c92429fbf586994f4ec4","b949a5b1fe3c5409c484815b6b1e0675f1b11819a9236a5e546056d1971b9a8e","1d8f51436982e85b24ea8b1426a5f0ee7a81143ad75096c92a05493708dbae01"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2682933759 · entry 108e9186e8c5677ab48c…
Expected log hash: d15c976489915f93c119ef146e715f5c01d5064a289c9ac130af05811dc83d56 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788318759763","kind":"published-quote","locale":"de","page":"theme:findependent/ordering/de","quote":"einfache und intuitive Benutzeroberfläche","rating":5,"review_date":"2026-04-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4fe8751e7d70…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.