Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Was mich besonders entsetzt: So ein Vorfall darf bei einem Anbieter, der mit GoBD-Konformität und rechtssicherer Buchhaltung wirbt, niemals passieren.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
28cb20b901e46f3a8b9eaca3f9e102d62147cf6f606f8f365d7fc5f5eef6d8c4
Signature (Ed25519, base64)
bjDDSYz1y261EBplKkpTbLEi6dYOuppezDYQszR4r8CTUXbyGoRYLzxziDkesfUTKMbUmLFJU6p5gc85qIo+BQ==
Merkle root
e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path
["28cc6945c4d1daaad70f14e25151e25065d91b59ef8d7b0ebe956c77213e8b09","8273db06f093ee12f2c4f63ba7f2d332ab9b52414ac2faf567c0392ce61a432a","bf90d33f1a5e6fa706c4ad4e2542f5829c00fb03ad519ee1fa8775c52754d07f","b77d8acd488249188ae838ed5ae032d64eccce7ce40fbc4a843bde13d8e06325","7d23b6e8f59de698c4622283f9b7d8bb218799bb45b5ca46b1e6cb6feb529eae","bbae26aa21cafc9a6360d199d98acf2f9123fb420fc42a6532ac10bd01219bf2","78347e7f71047471313b04d3e37b05d566bb599b64402a1694f76ad299fc0f35","484f68642e0e2f3ed483e1201c0bb58fe9f58540a1b5de4d6cea73f55a287cf1","73b0274b90f7d1b015280ff939174322ea6219cf4680fc64a9fcaecfd5cc590b","d3dde9351e2ad081d2314e7667d9e3345e22723c582e5c79dafc55a4044d31d4","9e64913b464a6a9431a308114b699d24175c49651c934b385aba28356608559c","92cc85abf4b56ac883fb58d5810f99b2ad76ece17fe5fc4a26c1b04750085412","40969aa912cd897f062ef7b007bf23221003273332528476c6c56656ab8df18f","c34fa5ec75d6e3462dddbe081b828d412a3a575b53cbb348f7047f6afbe95056","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash
d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787140356347","kind":"published-quote","locale":"de","page":"brand:sevdesk","quote":"Was mich besonders entsetzt: So ein Vorfall darf bei einem Anbieter, der mit GoBD-Konformität und rechtssicherer Buchhaltung wirbt, niemals passieren.","rating":1,"review_date":"2025-07-03","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.