Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Kann man das Widget grafisch gar nicht anpassen?”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2683442043

Proof data

Record hash (SHA-256)

18eebffb5cadeb6467a8f68ffd20fb4e4948f0223576967576da817a021da5df

Signature (Ed25519, base64)

g7/Pts/b4642zspz3eCYnFgWItJfYm72WUz6yczVITlCu+4NUyf+wh430TDR9RtduM4TEBlm0rhfELMSiqY2AQ==

Merkle root

fe94c04c20b3266750f4dbc6a3653f61780d445d01f1545120f6c37d36d71ff0

Merkle path

["18f47ffe9593fdb7aad913c3664cb73ac6d4f98cdf1e354fd23ad6f6b1ddb25c","ffe97a7b68fa88c767e0c7c1ba8c9a56cad6ee52dc03d004329d71494e88d90f","602c8476133dd160f6b885718328c2a4fb98862275a8150704dcb7775745516c","d9ded66758abb4c08a4b1f90448847cc15f6d44b82a2e1c00acd17dcb802e2ba","d322c704ea02af9d6966a8dca73a8a04cdc0cea963515cf8ee2afa243ffe8c98","fbada1981399e6a0732c2f19389e52dcff78b084d71c5eeef05ed2793c0e55ac","6f2eee950380a699f0c29298587d59586803d7d1b7db9ae00db36d2c128a64f5","c6601db62e3670d185546b34652562c5398c5cefed564fb76867ca62fd78380f","495ef79fbe2afe75ddc60c8f922ff4dad5fa56777133008b55b15244900a71c2","fb3ee56530cea172b8fdc2b9bd89719a6d52d8d7c1f8a040ddf8d87a8423b7b8","4698c788eef2f7d1bf02082c11bf386f674e383eb7d0384524440df6943cb834","8a200848e6a1084b4e5945fef3d9ceaac51c11ac5f4d7b097a8b780273ce81e6","93f8a73d581d5a577779ea4e3a5ec90a9403a343dd763f3df4c580b86533a7c2","9764411b9036157d4f3622be5a17f6276b575f16c417f7b08dc6150c7a3e326a","360c1b8c241372c87353049db4729fbb13151e7694db18a4b9ba21ddb2c2ab4e"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2683442043 · entry 108e9186e8c5677af84b…

Expected log hash

b32555b0c0ed6ab3025d809fd17065d5a2118facd0208ca397bd6fef92debff6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788325010619","kind":"published-quote","locale":"de","page":"product:meteomatics/weather-widget/de","quote":"Kann man das Widget grafisch gar nicht anpassen?","rating":3,"review_date":"2025-01-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.meteomatics.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fe94c04c20b3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.