Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die App ist wie tot.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2776f7ec21284730a75b29762dc826d59e2452bbf922ef5214cf6cc12668900f
Signature (Ed25519, base64)
Alog28ORKdPgsTwNkP1TC08Lm2rkzvIrGRk5sMmrpfTpOPIIuanOjJLyz3y36UkzBpWjPFCWIHSKVGcBru6HCA==
Merkle root
8b5970f4b146530c341d90a6af2810c5e81de90ff6866f5f7ab1feb7b3b58339
Merkle path
["277855f6463fc596ddad57933c9995961b17624defeb4bcef5b887a47f33e7d1","beca387f24dbf85af6de1050691eda3d8f7bc7ab6ca41bcb9c529caab4265ccb","4c99e700d25f28da7b930c90bfcc2d22b0f42f5d40f4d4f7f93065f7e95b3188","554e32d58e703b5fd7511c5dde374d356e08bcd7d25b410956779afe1d62a6e0","b5dc2d9406ff1ebdb42a88c9dc11bfa31a27a098d809e39776d56bcf1d284495","1600d265cd4eee1de54f0859271bcf032efbfbba6e07c815ba192e27c437d8a3","b554b71a5c5968fb61ca08ba6a0db3f5964bc2db0bb94ef1db1cadd9e6ea386c","a40b2dd0eadb9a44ef536835bc2c0253b0eb6fa5f2a4a89fd22fa507855be1ba","414c084076858c0d9371e9d16eb06aeeda76de6625f9e74ceec7c8e93f85d419","fd1b166c8ad27402683ddcfd481fc3c1e2936b20cc714c3a0d0ba02b90deb44b","3a29223a801cda0ed902a1428f39d547ef6a7abd381316275d85f0a5498149ef","a00ed2756c4b4eb1dd73d63cbfd7af966d3723837ed7f1905c174238a43d794f","8b569dbd35e16a3cf6284fcb35d07452e370b6f363612f06f907e8dd9c1e09c5","e10016342536fc9141a66bbc7dc7af86f923fa1702e2584c59b9c89c4f07f20a"]
Anchored
2026-08-16
Public log entry
search.sigstore.dev, log index 2483496382 · entry 108e9186e8c5677acf0c…
Expected log hash
9e156a9df8edbfe61e2aac6bdc3033ceb5ecaf971b297c4e0a7645214890c65d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786848988221","kind":"published-quote","locale":"de","page":"product:relai/hardware-wallet-integration/de","quote":"Die App ist wie tot.","rating":1,"review_date":"2026-08-01","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8b5970f4b146…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.