Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Da ist etwas schief gelaufen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
30e8a3301c49c33538305c1b17f444acb93a5b4a3567f9c9367d3bcf33ee99e0
Signature (Ed25519, base64)
miMGwMkhzHg6JKB+ufE5qVoGzEs+Oj8pm5SwoaigQOYfZxIwCOuvBircQV6xdqdIXZw5cQNeD3ybDT6hkeQiCw==
Merkle root
b046f5df2a406d6c32d4f87e14105e0107f6e314c3d6063465b8c6441189c891
Merkle path
["30e914cebf139dc93a5059efc2c0a6f48de140d7662f32a0bc299b0f7befa99c","f1fd2d01b3a4115be42f2bf3d6878842652153a775bb58efc05300e328df9661","082bab54a39777b46e9059e43e7a524d780b2a428a593f29141378899d88b560","31b729ebb7c40bf1c10463effae471c9932f33058006fbdfa8f583cb22daf762","a86a0d5c7d2af3473c8dd84a123f6296cae0ec228674c353334a780940d173e3","04d03e8b936c5aa2108dc7a66daaf7970db8d07c3217e0d1f09f0ad1345fb831","603cec48c09e8f42927623774d949894ddb52819e2436741affbd2dc1257d6fb","f963d6c54214a982ca5c1e96b91914dbfc16f9e663d3b355f0965b9d93b62036","5925290be98c3e333c455c29aba76f30be32e35c62bd266919c9e17b5e0a641a","b82889caf6b6620cc6db16fe8a2aa011d974504aae248e4ef087f3940b880483","96fbb156328225f34ef4f6a8003b1e5020b9c2e7d3fd2ac91a0b1de9f40ea99f","24787112e9ad30a8e436340e6cfe131aa435cec324f7c4606c1e0a85af9fea1e","f337a72b5c8d32566231b69df119a20fca7daf15172b90c66e1b6d332dd78858","c35362d8be7493456726dffb35f813b4e10ace25b8e2c3679505eceb5d9a7bb4","4a4ef39d7ab636950ca6d9b7d70c958b0ba84299c7f375e0932c9308990ba8e0"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2593501033 · entry 108e9186e8c5677a6e5c…
Expected log hash
804ea852a1c1b02b8c86a35cc42390aabed87fd2aa29b8fb9f7f25e79321f581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787709693011","kind":"published-quote","locale":"de","page":"brand:swatch","quote":"Da ist etwas schief gelaufen","rating":1,"review_date":"2026-08-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.wearonize.swatchpay","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b046f5df2a40…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.