Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Diese App wird mit jedem Update schlechter.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3220996539

Proof data

Record hash (SHA-256)

0d19cb6045ed0307df007eb925988531d3f3adbf371241707a1c75bc5b103b51

Signature (Ed25519, base64)

yHQ0ZH5hKTkvYxqJsFeFy8gJydvQ0tU3v1nRBr7m2pkPx0yj9cyWcElHw62Q4bmtCTUdqx66tyNbIhPBiOwcDA==

Merkle root

1b0b408c7cf60721bf3cca50f4b7f268b0858a42fba11906e486c6694252cb22

Merkle path

["0d18d192a5efc7f4b772a689fc4f1e4d06493f92c29f1eb9a9e6b10ff9fb6318","e6694984f5ce833352b1ab7989dfcf7d24b9d35e6dbad9acaf524d9509d3ca5b","53468d5fac59dd0cd29db7b58a04160c664deb2bba495aaddb083f8e7142de6d","c49c7b74467bf49cb9d4ac360cdca5dbab2a929bfa0c46c35b883dce85b3f3bb","f873cad4b70ea8c2e62f733b6068705655aa87c450e346d6c59269db1871556d","8db69186054b08909beb41e4c4fcab2aafa81b667079430be7eeeb71645b87c1","4bbe842363730feb64ef2f7a1b21bcbb040f218b5504e5b7b2b3b804c1e0d440","512051aa4f6c3cdd7ceef8615e48c09fd9672d6cc65ecff879ce17e3d23e3d05","c2234cae265a5a2dcbe9add0c45369029820abbff0c88d767eb33b74aee92435","aeeeb16151a162d2b27624e00c86c2ca5bd8ba4100a8e4f29f3d257c125ed826","4013b5e2460ef566687158f1fd705e4fef92694e6adee5c4ee856d013971efea","affe0a53d536804a9512c630206a4b534a27488761c0b34e6878dbcba4a8ae6a","bd64ca269edabfbd30efee623435236838862399942a0d08ad142d3df41d1142","8547750c311d384cbb1a945300d6b6fb4f4bd2b78af7177366b3baa4b4c1e724"]

Anchored

2026-10-12

Public log entry

search.sigstore.dev, log index 3220996539 · entry 108e9186e8c5677add5d…

Expected log hash

00694de1434e648cba57bf07fb439ed90ba501083441667555bcf619bf5edce8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791779426071","kind":"published-quote","locale":"de","page":"brand:acrobat","quote":"Diese App wird mit jedem Update schlechter.","rating":1,"review_date":"2026-04-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b0b408c7cf6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.