Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Unbelievable that all features were simply removed!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0da75f2554d8d32a2d930054f374530befbb0bfbf7e32c20bd62a03ff7a6fe17
Signature (Ed25519, base64)
tyAxH5w86Thsqb8VmqJtmO/WYJu6hrQKjtOuIUwuyr/siwfkBMjvicWBHEPl8rYPdDaetjkZ4nEnXYqJL73IDQ==
Merkle root
105661e0dc11eec81116882b16fd8acda1c827c70c95072f37f1e883085582ce
Merkle path
["0da17ef2dcf742b9f37753d916e835656914ebfdcd4bef3821af2d3f84923901","9ac6f21fc9ecf6ee44c7573d3ed9c940f053c4f1e908041e53443ad719263295","3e95121f86ca3d3f477afda007b45e8097b45d050437d465e59b676e9336bd8e","879f1ca1593714f3b84a3377390ef2ac8d119b334b4b423fe8eb24cb4b3655c2","79f7cdd98124234540fd9fc6b3713f825817e745a1b47d4f569260c199860e79","688b3633c8005241ccb8a3dc572afb98e546593f048c5c2320f158139b37912b","3e2844d3c565f5e054eb093f5c305ba4147db61dd6521409e04d71e784703ecc","bea2ea454a3f87613e942b0f74445ddb16765cce1d93ce82a16d3c30582426ad","aa9745f05736cb2d1faa11c8c93971050551ca228090381c75a9052124ac0163","612224981b382be1cebf60ba8a8589faa913041bc2d5a93c80212dcee729067f","6b252f43d4cc12603bac5935fb7ed9c77854c6f9dd3418fff08118fd8ac96fb3","7abb68ff7b8e6058b9df117a8053b5b61ef898e5c7cf32b89c5171c046632b99","a13ce97d602a228d6f3744d88932177f5fb29e4b2aa193e896f5d2f631ba583d","b7cd78f72e1ff3ed0e5dd5efc148786b24a846e3493df91cde1b58dbc82aeeb4","caca5e74ffa93053dd1e9893a23cfa4dcfa7162e5f4edbc1eeeead1d2f6b0466"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582642691 · entry 108e9186e8c5677a5752…
Expected log hash
27172a9fe70fe428b6fe8e826e1330766adb69879c24941ce10f104786789683 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787628738977","kind":"published-quote","locale":"en","page":"product:sevdesk/e-rechnung-software/en","quote":"Unbelievable that all features were simply removed!","rating":1,"review_date":"2026-03-14","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (105661e0dc11…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.