Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“es wird nichts gesendet”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2ecd940a2b88ca946ac1e7e1003d832949d2071e10e8fcfcd476c9ba752936c8
Signature (Ed25519, base64)
5tD/1/dv4jaMLDnvBpQNYlH+MeAgnZv2F8LCQle/X37Q7Ir+As1MM3F6kBptqOi/orrjhuSRsT1wrSMz1mfuCw==
Merkle root
daceff63019f1382850c569367d5bdd590ed4595ede014f2eefb6ade2d806300
Merkle path
["2ecbc17b0adb4f94ca234a8d84ddc54aecfc9aa543bf6b14a507ec1dff71d69b","3960436bef7a38281d1fb97fc0dffffe41207c4062b92f24a334978bd5228994","a7f68ee8a74cc0031e62cba3466ad5aeff88f7b68ac3f6c54212ce13d6a5d456","d06103d09e2427f9e6866fce7b8d76526324b4d8c3803f0fd20a68efb2b99981","f0aa3ea470e682e9bf61355df1700272fa61623f686f6f861705ab19f646aaba","6cae76fe038d9a334b7fe4cb4ba58fba7e249ecf8bb05b224079f49d0ea83867","58387f61399dcbf465bb1a6aa18fdf47aadca98e660dbfef018d9dacacbea71a","af41e95bdf8f7f94c8ef1058008e18e8d4f85f26c5cfc2dbb5b207e973d79879","a861a2a25f4ebebb2735fd92ac8ba2d09f5b7c8aeccde60b3ac14dcbcc50ee7b","9078af0dde983a89bd9fcb6197f244224638fc7b774db3da724b82ddc397764e","ed8b556bafc3efe3527f649cf40e7d3a45d138a1c8bcbd59f8063b0d72f7b481","03c23730f5dc216ec72c88122791e6797dec6bec04163a4fb7afca20ecaa286e","c9a5d3209bb3c3a2fc96073deff7ae1f24ae948fde60a1909715d29f710d4a67","658530d1379fb6dfa08978b61c4f970b14d7010c6440325a1cfcdd219f217d90"]
Anchored
2026-08-13
Public log entry
search.sigstore.dev, log index 2444811071 · entry 108e9186e8c5677ae518…
Expected log hash
2aa059ff0634c0f19689b671a4618bfc73026ceba74535f0e877ac13568b88fd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786572717732","kind":"published-quote","locale":"de","page":"theme:relai/delivery/de","quote":"es wird nichts gesendet","rating":1,"review_date":"2025-05-13","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1513185997?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (daceff63019f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.