Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The annoying emails continue even after the trial subscription ends.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2647299953

Proof data

Record hash (SHA-256)

12fab82f9353cd491d9af48eb35464f19d6690cd325d6a6271e0cea3ec1375c1

Signature (Ed25519, base64)

NmkatAjTb4ae0Dx+smev7JL9Xk6b77c9/iXbwI/rVt1z22AHUKDVZKa1OM1W96cocrawJurMIqenxkXe3VomCg==

Merkle root

e650e75fd77078528aa305533eee5d0a1a546628fc8516773e724c8dbfd143b3

Merkle path

["12f2469e4ba9e006c884300b19282fefe756569ad0a4e14dc4e41a32c799c135","a19fac8c50581d6d57b2746c9b4b0d348749bcb4abd2ab4f6cd3cb1a45c379cf","7b3df5ac07939cb240f6820757322f4530acd734a38efca7e22cb7c8a0982403","967c65a619a65bf6078179c3960e67843795a4413bd1637fe204c503a8f2dd62","9b488ce7b8e6126e31be1ae708dfc028e92167c75c9aef9f852ef28a7a3724ba","644f0b3c6f61397bee9413df38881d9ff28cccc3e1153577bbbac95bb35ccfcf","46557a2fa04b20b07b8d5fa6f8a689ad5bbc14d1db3ffabcc6b895bd0dfc494f","6a7e05b338c430bc1864a897f983d8d8801e2127faf72454b2e250e3d5842c71","a53366a16414d275cc8c67b9f3b65160d113b2e6bcf172aa71325bdb31dcb36d","104b342e62250772a193e2d4f9b47cf8523c1abe2ab931a8510386ed91da6083","60721fcef94b47569fdfcb198751621ffb987befff325dc23c096a5d7bb9e0c1","9cbfd3204b3e2f5027edc155e8333a2328120eaa38808f017553940b835c0837","03229a02d4ef23689ac574ce2fdb2e91509dccaab3854dbfc8d9e90af4ef8953","de4b01acb55e434b8077712a3cea8899c69e63005b6b5c436594f06bca9b060d","bd662811507e1e874bc6ba02d614a311af652dab0714938ac7c98aadfaf42cae"]

Anchored

2026-08-30

Public log entry

search.sigstore.dev, log index 2647299953 · entry 108e9186e8c5677a1824…

Expected log hash

d76177f6a64b24e24552f49a73f627dcd7dc14dd72da9a30f95c027c24a50fd8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788057950482","kind":"published-quote","locale":"en","page":"theme:sevdesk/communication/en","quote":"The annoying emails continue even after the trial subscription ends.","rating":1,"review_date":"2025-08-27","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e650e75fd770…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.