Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Bei jeder Änderung oder Update geht nichts mehr.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2631758752

Proof data

Record hash (SHA-256)

1b259bc2f5ef4f60efcd8c050cf84871b8a30281d49bf79dfa299ec7469a5750

Signature (Ed25519, base64)

d1uHoEHb/4cK1H6biZvHfyUjbhYn4U53RdvLt6kdNyIYtctyIbxWc1dG4ExcWHNSZZuctwjmTKEegLWdFeo7Ag==

Merkle root

a705e7ecc0d73eb5dcdfda7cc03235bd57a2851764423cac43118a70cc8e7b3a

Merkle path

["1b2d3b48b2a051ebea07f9156f77ba39b551807bc3b045d731208e43ad55d94d","ce520af41a35843e7aed37e86149ea9c1501a96a9b456ca9f20d7929a0be521d","52d3860dd05d7297cdd86cc93497df68b605abdef6b9373f9f512478b0ac3bc2","303ecec6e690fbe52883950b9e597b2e5936e107be42ebd3c829ab06eaa667c6","291365a85963fe6850b3e5384330e976fc040ddbd92adebf178bb35f78d4a6ed","4d8c7c6f7b250993eb8ab615398adc831f0ea4cd5d273a3403edca6b97f0a04c","80006a595ee233ca7ad64e526b75465f790a289d0d37951a3525c577bcca7639","d3ca8532d626bc6208a5a3792b70368b936f34c4a9bc69f75add5df741bdf4f0","9e6bfce63529dd3d817b532d8d2c4c94c28c4ad31574795e8bfedbf25914a7e0","7c1d05d9f98e0ee66d18955ff5dee9cf60c76e737767674af4cf2b15bc2398b2","e7d3f777eefd4fb06d24061d2b8906dbdc63d55a68cc649044e7738fcc9fcfd5","e036c40d27a9a1e41ada91266e278579066cd5599edd5b2dba97a66cb2410dd2","654e62da0e54472b4b5b9c8deb017fe0e371cb74d7538ff4ae544207e1da0bcc","a2d692bf5b7994c15c39856193482ea7c968acfbc3ff4915a355d04b18f7a933","79a9e38b2f2eb947c3bdfe67a6a6b2d9b99dab4a357fdf9e6328275c8035e767"]

Anchored

2026-08-29

Public log entry

search.sigstore.dev, log index 2631758752 · entry 108e9186e8c5677a44e9…

Expected log hash

b9abdd1fc769097342b82449a3caa919f2ee8419634ee5ba00692ee6314109be The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787969636370","kind":"published-quote","locale":"de","page":"theme:sunrise/durability/de","quote":"Bei jeder Änderung oder Update geht nichts mehr.","rating":1,"review_date":"2025-09-10","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a705e7ecc0d7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.