Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it was fast and effective for writing my invoices”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0ff666238806f946ce931b64fbe52ba74f7131a78f8da19c9e64f61ffd950b05
Signature (Ed25519, base64)
vViRtF1sUiUqerYIoy8s827INF8unocES/dxR3d/Og+vHZKISdpurCeCfk7DnvmCbP+d4SB+mSU/d5AJ2rAPCg==
Merkle root
47aef0bbc5d347d2f064428fd7eda9e99f7cea2d49004267bc87db0e45c42023
Merkle path
["0ff6703d9b23879672963f8e3d00411f630532b8ed46f0c3eacf489ba08b6b65","2d800cb2594e39a5625558c40b6e86fc4957bca970efce891875de66274c5ac5","5766152dd390aac66e02a771bcd6b29f8ad7e8adda9cff011f2d22fb9f965e5c","b05034203a1e4c32bcff0fd79a69260ee86e39666b3d54e7b84419778e230f2a","03fb73adfde404622da2940d837a09b68f2bcf54f4d40cb0536fafa5c8f3bfbd","6ccbf3839a2de5bed3e5ce95e0bd037a581ea538dbaf6b4bc25612241cdbbb0d","6a03690ee2793b0e6bee25044efde17c4fdf4bf5ab0a18f30c717af7912f12af","5913d7c6b0702ea3eaa78a6cff44ff25199a3465e07d9b26b085684ab6edd3bf","878b065bb1c8a07205079d9ba494e32fb7227d9b84b70a4bd0b1d50abcc47793","e5097c971cc13b2af80110fe9af369d98cc161f74bfd8fb7b01ae61896a66c9b","7b3258ade4128f6c1ddb4b723cc53273d903569c19f181f85643e056e5cbc659","6d021997492f2ec6d3d50b9ee12045d976e267450eb0fb1e31110be8dbbb6f38","e3337465312a8871a96efb0ade03deb67d9f2b05a969c667a895567781acf005","0889ae3150c7685b34e529b715a23984c1ad15ae15f158815b083df85c4c26d0","681b858a978b3dea64df3700a937a058d6290a8e519185bef8ee7388d7739dda"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3162173160 · entry 108e9186e8c5677aaa5c…
Expected log hash
00d82a97e8d5da8f3bb4a78d598390d6b030eb8338f0e0735ffde6aa5047ae68 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791539060014","kind":"published-quote","locale":"en","page":"brand:sevdesk","quote":"it was fast and effective for writing my invoices","rating":3,"review_date":"2026-03-14","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (47aef0bbc5d3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.