Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Kann man die App Freunden empfehlen? Sicher nicht.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514013184

Proof data

Record hash (SHA-256)

2937c3532d413500735343411b28685f7359ef81ef42d7ece74d3c745c281a15

Signature (Ed25519, base64)

3asogSkVt0vp6Fbvmctya7kbqRA67FIQInUrFTqwJMwCvmb7lAkwhnfgOqi1x0oC/d1SXYO5zIEFGXbUadQEBQ==

Merkle root

677e672fa444dfe5152ab91687c577772e13723ca441b5c8063508daedacfe44

Merkle path

["2934da52482876208feb0ec7d2e7de87d86579b139eea3eb597b6d14b56e9304","b7974ed3869f5745b3a55c6262ba51dd4178b5a120af84b54c59c9a7b50b613b","58a957fa7fd945d134335f5911c50eee9a2ce0ed6059b50b3f756d4da4888f11","754433401cf343704bb3890a3808d1f3afbd3bf2a6b3ede44ae9035cf06ec630","dd86d5aacca5dab3a6303eef70b0f7fa2da280d5d9d77474fa5ed451a06775ec","7720008c0a36136e7e626ff60ee6170f9bc9a7b4a8689014791bd5e6dd336d75","a6f147ca22e72356b1317740a2e7deb99da6ce2e724157449c0083129e5746ed","2a9c22b00a34714aca5d158880efdba66c00f7951f449a191a0bf174e430dcfd","ddc3f73808b9a2a9f20cc78735afd86700ae9f15965e7bfa67753570c3e80ec9","249532dfeabe6df7ef9911dabd0270a94a2452d24d41e7ba52aadbab409e4dff","4f7e11f3a09e24aaffa2b5d9bc4c2442ccd282fb80ac21f46af1fca289c5cc95","8e9a5f4bf1bdbc745ade9fe1e5c7ea795fb91f97c0b4fe18e82e03e5ed00cd64","bd6e996c146ac2fec0eac3e8c06d1c7b69fe86b69de929b1fa7a0fb372eb8d03","4160c2bd6ca5556fcece7b88bcddb2c951ca86b46a4df6829fdfab8c09bafb4a","188420cfe03d9830600dc87f84622c41659cea53d9b8db8954bfc926ce1d4dac"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514013184 · entry 108e9186e8c5677a6b00…

Expected log hash

a596e5a342226b61371cdf76b5c8be8e37a3d00e7ffe8f7b0b550e1a8d1459dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787122978040","kind":"published-quote","locale":"de","page":"product:relai/app/de","quote":"Kann man die App Freunden empfehlen? Sicher nicht.","rating":1,"review_date":"2026-03-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (677e672fa444…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.