Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sehr übersichtlich”
Google Play · 5/5 · 2026-08-16

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515144749

Proof data

Record hash (SHA-256): 1da1d6e2a2c89e5d49cba60a65ec547367bd3b698114728a2b604a333f1d60c8
Signature (Ed25519, base64): /CfS0mN91BbyCg0tDKOc5LM27DrD2Ya1eoYoGOYCgrQZ1NB/W4tlM+D/6aOPMaaTHrEkuL3xMvKDleTCCxKWAg==
Merkle root: 8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715
Merkle path: ["1d97d3d2c7552f346f9b48934aeee5252f9a2e3e6aba5b381338b6d734d88fc9","9ab5d3e70c60da9475b4b413d9d5addbd10cbcaaa53a38f14cf8bf4cfbbf1b09","4714737f35552d2ed80c03490bdb57c08790e7fc9c9a4b81bf3884b44e7e3765","aa39a3d00b54bd6c72f8092282dc1403cb454e3175734e42b2f52dc40bfd89e6","ed32b8f416bc922445edb43862316412df6919eb89191b1707931f552fec4112","8f070e0fe4e97618d26716fad3ed628fe6e5011643f7996bb1ee6d82ac6717c5","fa99ed8dcb572dfc660b65a69fc515c0601b977b68cdf5f1f7214160460744ce","0a421979f91d4127a87a23dceab666994762344a432675347510ce185afe1d12","3d52334b209bcec6ad1274eabfed5a91d9411eae18c67193026d8f9763616dfa","66d63f43693d738891fad0f7a14cef7bddf3a98acc69a81251f79e7bc2aaa6ea","41e57a2b05c63c47f09e80cf2e92777859ec103f2fe3359a6e307645bdad94ea","bc537f1105f00bdd399b50b49a8b3111bf9e8fb0588b87aa5ba052e5cbdcd501","5583124fe582e6d7b0315186ecf512c5208dfdd6f55f448bd7355fb580296e0a","6276ae8d472cde22fe3044fd8f103b6cd700eb8d1fe29c2f968f62a699dc326d","8834edd87c11ce9424175f1744f71345038aee1c5b6f350a6f7bc2a49b63e8e9"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…
Expected log hash: b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787137589246","kind":"published-quote","locale":"de","page":"theme:sevdesk/ordering/de","quote":"sehr übersichtlich","rating":5,"review_date":"2026-08-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.