Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“die App für mich völlig nutzlos geworden”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2612065734

Proof data

Record hash (SHA-256)

148b9a8b506e1cac60df88922caa1f8803ff2fab948171bd4792b420960af55a

Signature (Ed25519, base64)

x8YioypMxKefYzdvOj7Lzlq2XV6UQOCj+M1n9S0KDXnRMto5Au80vzc3l0G/EpUgAO6QP5JqtuO45Z7Vhs/XAw==

Merkle root

62493148956a8c17abd53a8c9ed797b64e65ad5bb98d36b7aa8d51c339fff025

Merkle path

["148e31cdfe596ba3c8b5d54678905f2506098fbee53d09e06ba98d813a064d10","935f1cbd2da630b23e3d5bff709625b1d6e5622bd71eccd3eebb1261388a8608","df5d36325b56d4377f30a6859e670101ed309d2ec19dd581938f7101127b1c67","35fc1adea36a687ca9c5ae0332bd33631fd1ddd12b9c2bb0ab03581b704a86c3","3a92908368fc20146fc3e0d800c9361d5ca4f9f52d7dc79ee504433a1cb77441","f02c1a995da14affdc4d91ae50ef9e08c58b2ddb3f07307509954565158235c2","bda463eafc69babf9a9a5689dca4258aaded1b2c588bf60ac6fdbff45a6e6fa3","67bbafb2c3d63f791810b060f7572bdebdddd44e5727c5622b929dfb8de7b6af","ca8cfc8714331bd33a0fff9fdc88f03a2e40af4f94f9f2b2fe57e3a3279fb9a6","3ccd0972ecdbbeb2411fcaaf1a0675a56f15fc120df3f10b79ba8379b3c16eb2","ab3a12938713e647343c33bc800af25bc24b0a09ef6e271892d72b021e454ad9","aa27e16e99a5c7264be75cc6d887e1542ad1b5d8e7c00024d09648982d3b9c13","0d5bfb2982eb496ec91088407bc450b593806e0482bfe81826869f4aeb42c62b","8c6d2c7076ac2ee0b8e592fee4b535c629bf4ba08a80f3d9ff8794fd682b8ca0","81ca6ab71bdfc38d6690336508e82bd1e82f9a656f0fefa771d1028af8c796ba"]

Anchored

2026-08-27

Public log entry

search.sigstore.dev, log index 2612065734 · entry 108e9186e8c5677a3494…

Expected log hash

f8318c40dc89e43be6c4faea0c023b4821c7ae9aeb6f05e59b451eef93c53bdf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787797679240","kind":"published-quote","locale":"de","page":"theme:sevdesk/fit/de","quote":"die App für mich völlig nutzlos geworden","rating":1,"review_date":"2025-07-25","source":"Apple App Store","source_url":"https://apps.apple.com/at/app/id731738076?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (62493148956a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.