Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich habe mich so gefreut, das kann kein Mensch glauben.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3637467057

Proof data

Record hash (SHA-256)

25012214aa3294d56ba68c473ff82526a2bdd6c2d53bc185b9414ba43fc7cef6

Signature (Ed25519, base64)

paXOUkDyWeMYhQkKjmbm+WvvUltbYdGhrq5i7RwAAJB11YdSlezIMNTrfE9yUS0QFt07U6B2wbfdsrs9ZIRECQ==

Merkle root

adea50978c44b7e5a42deebe1f6aa800128d7cb9d40a380b6d66c0a0412d1342

Merkle path

["250308194dc65933da583d27acce4c4cd5e83609d813cc63039e663a28eb3f0d","803780edc9ec1c8471acec75510f90d73a24771d9eeaa2e87a7039ca63f72e07","bae733012b9bf5c236d30c355f0053a6049bfc261fae81205633fca0afefbf73","7d8f3d52accfa94ceb5c6ddf4b70da3363ae5f3e3d319f71c1bfa60ab197e29b","650db14c3f751cff0cff0b4d32cf30b57597f4bc24c99472c7c9d98f27cf95c8","e9227356f4de94ba6c678c8e1c33bd7f3ddca10a0bd9842a21604579adc1f5df","19d2f5882a1de17cf159bd9290959c3a2af213d26f5ae4d8b8f5d1694bb3646c","e9e2df0e1ba8c7c3b9c5251dd258eb7d66a8ea49ae91dfdabf251acde037f0a8","0ee3d899c3c29d5da9e88f43885e8a28014e5b61e39b0ec301e5a7b1722f6c37","1ea9f563fa8a9312b01cfa566208520127ba1f82a5eedc361b4f75c4f27d4659","516dc08f856c83a4fa0fc91c27ef006a28eb01c247c40c1f31e76959a58c7da6","50ec2dae976e3d44f2664fb95a79e395a9792bad555e73c7828fab9d1d15f4d0","b33a96ef5b980f3655206c9db064bb6266945457b59b4b98e2e19f698343d0e2"]

Anchored

2026-11-02

Public log entry

search.sigstore.dev, log index 3637467057 · entry 108e9186e8c5677a9713…

Expected log hash

e8a3b7eb12262f106844c69fe5603c2e4003589f206935cef50a87cb382b9cb3 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793588145516","kind":"published-quote","locale":"de","page":"brand:taxfix","quote":"Ich habe mich so gefreut, das kann kein Mensch glauben.","rating":3,"review_date":"2026-10-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (adea50978c44…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.