Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Plötzlich kein Zugriff auf Wallet ohne sensible private Daten anzugeben”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514446349

Proof data

Record hash (SHA-256)

2e865c626ac8b4e163ef96f8da2bcb26849a6484c47f774811fb5d5531e6c611

Signature (Ed25519, base64)

tLAvD3XbQMB1upTC4X2lVbxeP9p1+a8fzhLYBkG1W1ddc8o/UFvfXl4tfCaDEn0c/5RyjnCxLGSahkz1BUwQCQ==

Merkle root

3030a3ea5b39192cafd732e0b397cfa387f40a2253f2715cd6a4d9d218dba468

Merkle path

["2e8aee5a6f63892266fd8c02f2a44522a9220e9b54418ea98645ca203ff2c3c8","cdc471419e98587d27e2131624dd1792ff975a91f39fb290d6ea3c4b73f0313e","4ddb5dd652a64b443f33232055b370ec3f2eb55332eeddf1e08bc175028029d1","d7a1dc5937fe57b7bd2502ff49b0e965ead9fba093cfb000385e1dc06848d28d","7bb778deaee8dd8c5453cd61a8358a055173f9da1246faae534d238532fbe0f6","9993c269505dfb2da6806524f2a131e08df612844889d5dc50842dc2158812f7","87f1bfcdbfbb6d5cf497c70d162eaa38f39875d083085ab932b70a980c8b7496","d3cda4024f0ea6bd1afae8c832f0f3bcca928b0fc834b47466e2383b9c149fba","725d0344c5d56fb0cd1ea7005d95d492dab8a37df396bc5fe0d7c91acb749212","90e0e926a80239204fb97af398d5eb077c208c4863b17b1b8c98e3d79e3dbcae","d8a9698634245cc877d8fc9dbef02badf1da171be1b126f712be337cfe4999bd","5c8e32c9cb55d9e02eb87f0b2d0113aebc322e5e2ce440b8ca0b4135f35cb155","b64580ae2e791e45fd127b60024d48487709b542c33fc98dae2df9989ebde8e1","9ee4f1ac41a4f361e945cf5ef1d6706808f116e9d2757e90134564b7d4d09bcd","559fcf7745d7b07c729ccd960c18a4660eed501cde8669d27c3235203d371b20"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514446349 · entry 108e9186e8c5677af084…

Expected log hash

901e903dca7784cbcc0b860ca8f2ae684aa8c7d566efb3654aface7bae409ccd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787128322154","kind":"published-quote","locale":"de","page":"brand:relai","quote":"Plötzlich kein Zugriff auf Wallet ohne sensible private Daten anzugeben","rating":1,"review_date":"2024-11-08","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3030a3ea5b39…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.