Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Benutze Code BEAT”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2d33efacb44210bccafb489e91c67f9222ebc31954ae3a1aa968ea3e4d30c21e
Signature (Ed25519, base64)
Lkce82Zg7dybvWFsQ0HyxSd0oWgsUTdSD6AP3e83GmElzMBrIe3jRZJmi0J3JAYvaQPGFFkUNjRjiC4adEcGAw==
Merkle root
c57f63ca7667642311efdded526d861b51ffbf52d1c426da305b845951427701
Merkle path
["2d33f68c51e6ecb0558165111fb134c99ac054b4c5ffec58afd2229bdeb84a77","15405112ad1df2068a8a3ee5a6c676794faebc4899ab8df2bd884da16482b188","1372eb17a87e5343b750a9cb805cf62fb025e2bf88ab20e6f5defa74300afa36","cb8dab9bec0e9000029167ca1e13195ce2a266679fd85066e0bfafeec2bf10ff","395dd8b055f2de0c9b55359cb330a9f5f2e851dfdc52ae3e2f2b4c3b2322e61a","fc7e29029982b5b9771ae852dd4e3aeb6fe56a27ea54e042a11cf06a0acf2c83","27bc91455a85925bee1020b734b1095c082a166d18753de00908a54966506edb","c86f1ba957b441ce95943c1b5a26af1be61d456c28d6862cdd1af261e3b9108e","3885bec96ce10f7cc20711dc90f7a0384ebdbeacc39849708bd494db50c2b739","800df378578cffb3927230868705510605358a57f9cc74f3e799f26abf995c6b","2adac60857f912d736e0a61005034fce85fb4d886b41d326c7efc11ecaa5f8e1","3036fdaf121b4ef59b47a0c0454108154e567af7c5b5b8e014ab01648264da2b","61391210b3f831a04fd8f72b9d70a0dec0597c4f0f223cfa9b9200919500887f","fb82e5449a31f87d138969592f779e1e85f8796145db30c2755c726c8fac6410"]
Anchored
2026-08-14
Public log entry
search.sigstore.dev, log index 2460366749 · entry 108e9186e8c5677a1509…
Expected log hash
00b1dcdbbd19f66d225c3906dee55743ddc8b55c3879f3a1d4cebd98457c90d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786677999476","kind":"published-quote","locale":"de","page":"brand:relai","quote":"Benutze Code BEAT","rating":5,"review_date":"2025-04-16","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c57f63ca7667…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.