Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“There is a constant upselling pressure, there is always another service or add-on to buy, support is very poor”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0f323f5e72b543da25b7adf92c56cdeb69b7e25549e0fd87791bfbf2464886c6
Signature (Ed25519, base64)
2WbIM1cNFxFs6TVKyA66NJ9cFA5xq5ve13HvzBe+EHsTV1+AynNONvKIupAA7VafyMM9vNRsOA3hyybvpnyZBQ==
Merkle root
c373d4e92a0f0a999ee34abc270a7b69ec2e962846b5c93e34fb037f6f52ccc6
Merkle path
["0f31cda38e581caa0b6960c76d9827bd89252043f2dcf5fe886cee3c37f002c7","3190822b676daf633074e3e5a32ed9dde59264689b79e049844df477e30006f8","0776b26a12490290e3ebdd6be4e8d082c2bc7c6148a942ca7dc92080f65e703d","07eb60e1a30fca258e674bc97ab726218cda03a5017302f5032665d6909ad5bd","ccb5c6b3e30afe023e05355974f896422fddcbd0a2d7fee1ff038bb12ccc0f64","d5385b01ff35fcfcd6515fea72c067e67d375d9c461047172d74893c6e9fa8a1","4ecfebb892b04f85953939333896ba4dcdd0359e6a329f79474770bdd0484da2","822376146ec1f2d5fc70678c7cbe9f35e90ceb933e9e2cb8b6ea8136b9642c75","41b71d5907cce011794d88c213b7603d5a4357c78fdb4a764f3b531d3614a510","7453034252c7d631d9b605f82184c756b5cb2dddeaef558626172e837d296bb6","c032846e67abd6d5c6a6a1f14de14a2d2691b5db95b94e419f57d2bc43b1da70","b0dc5b7aceb73bb773d2864962958f27a517cf48416ce4324cf003b32d5c3044","576f907954ae138afc5d4baf92ada14d4db33c393e2ba87bb7c933259c92b16e","5bb9dcd005b1a0fcd76915a4257b2f7ba531b1cab0875d9c269afdb1d06c69e1"]
Anchored
2026-08-15
Public log entry
search.sigstore.dev, log index 2472843658 · entry 108e9186e8c5677a32db…
Expected log hash
1496b70a8eaf97ffdf4b72bb9d3d196fe264d7f7dbc2f184c94cb7d35db7eee9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786768522431","kind":"published-quote","locale":"de","page":"theme:bexio/service/de","quote":"There is a constant upselling pressure, there is always another service or add-on to buy, support is very poor","rating":1,"review_date":"2026-07-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.bexio.bxBexio","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c373d4e92a0f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.