Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Creating invoices works again.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2a3a2ee9db90861d857cef8d0785d10ebf0ae1880e5d4f9b5ce421fc51f5e63a
Signature (Ed25519, base64)
fTS0zThz+a8oD8efDdLVsXUBxN1w1hVtyXETiee0l4hzW6YLgUJ8+JfX5zb9Rita0CF9je+S8QSvNgU8K+CWDA==
Merkle root
cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23
Merkle path
["2a3cd96a8af4f0a38cf2f9efa3f2d280f11aa0ba68c772a743720fa16205773b","e3b11ee752cf265c68ad89e4ae7406da5caa48f220e915fd6e4804d8b3201d0e","48ea80c0412c9a2a2ffb34c692810118cd948884b59c5d6fdd1970b7294fb3de","673d58449e082f5529eb87f88a785c3352fd414ce9e8dfcf4482e838206efcd1","df1f8d70dc712130318fde5adc94f0338a2d5c1b451f5d63289d53c05b670c36","ce99f3a5b5ba662b13d093f913cd282904492fb1ede0bd8c4d141748a027ce4d","2a784be656dc7a96b8b5205fce5f00d6fdde1c4579692f3283aff315effc8878","83ccdd058f5accfa6121ec7771f571253752e935969d69bbf8a081560392091d","615636c45ebfae9635fcd0bacfe1a243a296c8a13cb7e04bb235a5f0df790587","97d3df827e03f4726bcf09d8e5bf2ec7e20515553aeda15bd6a5007e8f306c05","e37751a4183855c5412c58192d4fed82f642d87cf746c81989d46727a50c7042","dd4a51c39ef5fa93876b3405416366bbf3a7b89c2c89374c78e1ee723166ebfa","4372dc9da9497fee58c424202bb40227ff1140a098c2b49beac2f4c4ae9a0331","0f351cde6b1d9915cc0e417c0e2f1f0e3b04741e1975a4ad546a8eefeb399e09","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…
Expected log hash
8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787281943761","kind":"published-quote","locale":"en","page":"theme:sevdesk/billing/en","quote":"Creating invoices works again.","rating":3,"review_date":"2025-10-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.