Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“3mal gemacht,nie mehr wie 390€ wiederbekommen”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3668845412

Proof data

Record hash (SHA-256)

2334f9edcb5225ff0a58312908cb347e0c5fc5e7df2501609bc2c2d377092216

Signature (Ed25519, base64)

Be+VBeuBoA/2NV5Y+2DWLkNwAYXdBNdfZ+rEsNvE8dpMQBVQeGqODHgUnCaBBdls30sfbxrGgHClvNft0Je/Dw==

Merkle root

7019aaa5828f6d5097886420e36d6e6ded993bbd5a23bd9e2c5cfaa460d7110c

Merkle path

["2337412ea4412d40220a89a97c8658288da6ee39c22c74499c8eace073d51f0e","799106249a4cee1b5b08d2967768bfb62183c9359a5b8a35fca5c18d3f31002f","5e91698520238c47207d3a735009b5eab9962ddf7e1cddeb8723a4bc86f16ccf","e02f107ec3bc3a92fb8529bc82e82e8392439f3de201b25df8cddaf9ce7df5b6","da7d54c68055f9f8250c0cfe896917aa5ce33148d56b208824f67c6e9a758243","37a23c3a25af01984561e273f3d5472323807ccd61a4010de0354206d9ada605","46b18109e4af2c32f9a80de7f401ac0e9adc5116eb48b40d3d9934385e4a7329","96e4e3fa78f3e348798d7d27b950077f520c8df29a2988f62fe5049441f40739","d0275602a967928b606d89cdddfb82d257da9f42f81d86eb2d18490556bcd007","a120cae915d5d33790812e08a3190e0cf625e4575987bf96445665d721bf4346","851fa3adf59fcb94defbd04f85fe33bbbc575b2f123c83a8c1b15423bf3c6c45","70afc385443fbd90d5057df8dcfdd810a18b6e5abb553d2b96a045cffc7ed8ec","3eab3f38cdf1b48533da9c351ed9f742051b60c6252331b34c1bc9a3d2442b17"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3668845412 · entry 108e9186e8c5677af265…

Expected log hash

9f4762e1bb287ce51f4f6f20cca12e845b979e3d26d611c4c9b3dd71b059c0c6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793707083193","kind":"published-quote","locale":"de","page":"brand:taxfix","quote":"3mal gemacht,nie mehr wie 390€ wiederbekommen","rating":3,"review_date":"2026-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7019aaa5828f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.