Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nur noch so, kann nichts negatives berichten”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2882354328

Proof data

Record hash (SHA-256)

2b85cda37af0d7fd1b2a9315c6d29ce7135bc1c5b486fcfe8e667abbf99348d4

Signature (Ed25519, base64)

vCD3iNn97au1xRf1WFUWvL0qLgmeq9hyevmk9Cb56xPvzkBXJS3FizYAej544GRWh6uxB0gVTjnZK9st/RCnBQ==

Merkle root

a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c

Merkle path

["2b86a8b78b5085860af0095347ddde6a09777f35eab1163a38d20e061e818d9a","7fb543233e1855b1f2a380ca9e137ca86205b83d540e0935a4835ab7e5e5cc83","a2f8beb0d284e717d97f57aed2786b49751dd1cebb73529801da5da2ac350e4d","6e5be7876476b101771937443b798ac96c23d7ccb66d8df3669649244de179f8","9d41b9997f2e2e07a42fd8e84225bfa0bac08c47e6a6dc97bdd5115600f7293e","d2501b155a7f3877b87c269af2b3064ea3390ab5b83dde5f120836bc93b93f80","db84f70b0cb55fdd5fb8527f540855e62e6dd732f17300538b0f9a5904911d49","35c7d8bb417b7778efde216f4f7f11406d955b81195bc9e85caf235a01c95be1","e6b56542228561746ade4fff1b584926d739932f81f09d5789593d85c226f431","ade087e816e9e018633b46ebfb45bf2230bbe953386e6493fae177feb752a461","fb101f4ee826e0b855539e754e1d8872e0a3c87899846de4a472f6b556d97e9f","90a6fdaf54e9769a781d5d39bd6f44abcef9c3b127ba36aeaa3cbb380fc5a5fb","34d17d8fbe0805298b779dccbf4c1befbc8fd33e42aa34df809cfe1ae000a274","71601cbc06cc18d15a7af93021ee7957212de37616a4dedb4252c015daf6350d","5153df72155ae00831ba1e4416296382c39280ea82c989972042c066f445006a"]

Anchored

2026-09-18

Public log entry

search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…

Expected log hash

5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789619628558","kind":"published-quote","locale":"de","page":"theme:taxfix/quality/de","quote":"Nur noch so, kann nichts negatives berichten","rating":5,"review_date":"2026-09-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.