Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Was habt ihr bitte mit der App gemacht.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514629481

Proof data

Record hash (SHA-256)

1f31f57fe92c97d785cf7768ba443dd6ebb78e11999508aebaa62e94b19110de

Signature (Ed25519, base64)

gHD3tuywPVcDvLvleg7dCt36+at3Ky9TqydsyPiS+jbR3JvCjHh4nOSs1vJlo8HDXJtbEhwX57SVxBRmzQEkAA==

Merkle root

3aa12e5b2bb49befac906908c9a841e9a421f12d0bee8acab9c1f906487adff2

Merkle path

["1f33d84a6322ac2fcda74122fef5669d959b2fbe05c9edffd4ca96c71f1d32e3","e4e252edf4d32dec5485be6aae20b6a2939e58131956ad25c30784c508024439","3c3af7c47c66f0366929a6b4b9456d32700303045a9f1a463365b383c723a559","d9983869271d431835d5aed9f87ff3d11a873ffafe00548481a16205872d3d89","d29e6c0e9bcdb6480fc532c548a3062ed574ee4f0e3456fdd0a8728b04bd8f7b","d7f230a213e56a38d349850c891138bb858506c8dd2ebcb1fbcd21b744312b81","bd2b0b407ad22c9b78e04f3c116729e98ff20f2cc44a8320c079c034fd3bb052","f646375b79d00f587893d05c0abcb4fafd6716c31a0dd73602ae828796f340db","411fff7e19c8e6d09f0838aac2b12ef2a57a93e6553f50b10a570b54b60cfb52","be5a0bd0b3cd412a90aaf1dc7dbc7615811a3f8ce79bfceb2d73f464a12e4a65","6268945e9849cf805ff520997e56f16add0a9e2120c6eb4f4ded7c07d7bccb7d","7145a25bf2e4d5b12b2e2be0ac0e96a9eb61682d26d172b63f2d28df120614e5","499751eafaebbd34bd3075e397b2751a5b4f4ce58d0c2b3e5d8399f6706fd4dd","c3a6c334f1acc8c0b843c5d43c85ce54d647d519ab035a8287aee565097a2ae6","6099970369039e9ea9943621e6c4ddbe6cf64be652afb6debc70debb01455286"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514629481 · entry 108e9186e8c5677a8c32…

Expected log hash

d923130994e40329302180560c0ed5b43e4400136d037befc932b83910626f34 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787131980797","kind":"published-quote","locale":"de","page":"brand:sevdesk","quote":"Was habt ihr bitte mit der App gemacht.","rating":1,"review_date":"2025-06-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3aa12e5b2bb4…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.