Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ziemlich gut gestaltete Anwendung”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
14f90ccc77f212ca4e223f0a79e9c47b8edc39508069d0f14a7f760c1af85ea5
Signature (Ed25519, base64)
mRw9HWfaZsaBWBIYjWlSGjLGWYyyR3f0h28A2avpfM5n9OhidZd3tXhODRdNLchWht3B1eQmNCWXTHyxaXDBBA==
Merkle root
b3122ddd7ae78437c88b5c432d1d272e932d99a36327831f741296c5804e0eec
Merkle path
["14f4f0a1d7cfcbd3dc474a83dfcaf14ec18ad443428b4e4a473f134750283f5b","ab947af77ca50c18bac53a9897d79325f8d0e69a4c2b727f611cf2917e8e6e98","c362063e53b1e58ee5d19abe1630ca18dfbf4281906900c680c6c2da0ffd5ee8","40ebf816a081737e06946c002f8099823197c047b08f9cf5b57f1ae19b980b69","fdfb9931a0918dbe04cd234cacde762f0bec57e8a549af5e4d06e9d60a827337","719d4bfa2c01e744a73e57159f88e74123fe774cf6da3b5496996554403ac80a","bcf3972ebf74d09c356a5facc406ce7e9178f3aa175067e29e109eaa5a16bdce","658075a8a9cae3b3d3055c46cedf2b31bb763b5d56e873d3db7d4f351b308827","e1fc3ae1bb76f59eb840733bd6cb0a568d452dcb042a953c8cb568fec2208a26","417b74fb65c84f1bd7ca7b5be8d631e289cb505be498fd3d3342077c1886fc9f","2af72f591887434887ac4f04aef10d065a53ca23b48c80d373c3274b5f82853f","afc410f4c7c2995a0b70eb5b9073e0604c33387ebf2e2381b9760ff10ab70cf7","c22e3ca4e13d6be34d7e2d787b0073655e272c17b975ef51a9080763273d2609","e0f5a3f9535914a67d876a5c4daca45483a20818791753e411dff623a270df15","3414a8c2f9a037e1540995688a310f939676497d9d86d0c2118ec57a53e60c3b"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684135818 · entry 108e9186e8c5677ac65b…
Expected log hash
aa65ff4939d7df1f40b93b48ba8bc57094c1090543a7b0494509e8f24b5559df The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788334509514","kind":"published-quote","locale":"de","page":"theme:findependent/quality/de","quote":"Ziemlich gut gestaltete Anwendung","rating":5,"review_date":"2025-11-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b3122ddd7ae7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.