Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Für wie Naiv haltet ihr denn eure User?!”
Google Play · 1/5 · 2026-08-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543266411

Proof data

Record hash (SHA-256): 1c91346aa9d3ffe348586a29dcf6af252f1fae34b0735a3656cfa272b801fc01
Signature (Ed25519, base64): 8o7DYYJNJLvVsJlOrRk6vi2QqsufE4D8t5LKfCsn9okwD3zYBUo/iGh7pXjGARd3wodD4ebIMNULXqBcM2y9BQ==
Merkle root: 8ffad6e97d1457610bec7a891f189d1ba7dd7a92ca672c69ff1ce3283acb4b5c
Merkle path: ["1c912874e90ad5ca7836b34b6753755deed69f4408a87a10fb1b64440f9d20b3","bda70e943825f433970895743dd11a2eb57b4df8ec1e78ab40b935d67dac5dfb","1f4b6d1f32579065b7d6a61a574f6da8b6df24718a1337f60f6fd389ea1d9405","0f74d97faf9f5efd87b1f7f943bcbd46a8616118dcb83957186b8d6e1973ebf5","5c6772d2fe9e419a739cc0f0f3f76bc85583064a070aa7ff37f1bb65f505ba8d","bbc106d9208d72e53abfd508a4fa52486e53a68cbf5254cdee397acdfbe41115","2dd5a669e9d950c94cb7a9afe89e2996c17893c6a31df20f511093920c92b945","2fc938685dafe55495c7a6b31ea76b069837bfad3a993361da02df4c0c4ee882","c39f158af23b898fc419331d3c03cd5df5b0095f6cbc76b25873c989bd4eaef9","7ace2ccff56b7ebd0eff72c54f6bd2861ddb1dbd5e03e71895aa80ecf6d793e2","9e59fcaee503512b5df526b75d4927d35f71304c7798ddd60f4cd231234344f2","795ec3a0ed2985762c41853d02aa00e1af19b3d1388332eb82c3d430338c7697","a96778a5baf37ff274f68eb2f3763035e6ca2771bce9e48327b04149f6a9cf89","c3da944168348f2737a3a033a43606f7965e05f20058b59547dacbfe770ef5ce","e9f7ba9964da1314f660fb2f84a68d574ffe9983879b5b54001a09ca5cb5f33e"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543266411 · entry 108e9186e8c5677a241f…
Expected log hash: 443ef8f29d5167ebb4c56a46778facd07b7651afa8db2d089c14a991ce0d04db The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787284817344","kind":"published-quote","locale":"de","page":"theme:acrobat/communication/de","quote":"Für wie Naiv haltet ihr denn eure User?!","rating":1,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8ffad6e97d14…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.