Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Zeiterfassung in der App fehlt :(”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
316335ba8349359b872f1453a9af021be6fa42cd6c9ac97704a710b29c14af63
Signature (Ed25519, base64)
b40k9ybgpW0ObNeA8uKAaT3L2BqhqE6DOmWByUpP3I/Ar1uvNQUNTC18xoWaTmADeKPSZSsFCvd89rWAmNgjBw==
Merkle root
2cd516e344e4be63e12361494ae610d89d15708131c24034ae0c7b134b8bcc53
Merkle path
["3163a07430c226f829c9a58e4208829ce160db3dc0a2901c9375d2b77cb0d3f2","12e084be77c40d5d105101df52595da5b2e028fde86a44b9c0ca790f39c0ffc1","daa6a43f6a21ebe34074d31f35fd11929ce3ae339b3314985f950389b591af25","229ca92be688cd2e39bb3e3602588795098280688a37dc504bc141a9f07d1062","b5c08caa38ba14cc9e028d9984169e2917824819c6e7b39a1887bb95693b8e39","7be844cd7a5a571ddda44a4a0089752868c6a4239c6643c2b29fab358ce9f2d5","6d712aa7f66e11c0e1fe406427f201324fca89b9ee53a4167f2f002e49c0ca04","33f1ae027b1b878c32020a52ef6d57c3df2ccc2a3ba62a5db6036e51b7388ec5","1c0dd80195bcd295336084790116b9fa10591ea09a69634ac3b9584655921266","dc0e38a0b00e25d0af4106ab44fc21772c5fc8ad443cd2ee9b304b48358af411","eb1c06b5a0e52ad8147ba0048d2d07ddff0fb6c6c00f840e20b022314e50e559","4a64fbcd87e1c81ce54c106e15851536d026ffa7b044f67559182c90c2fdc2a0","9a12b68b30934371f086c30762f865c8d368b21c5bbb850ab6a93dcb853ad79b","223b4ba84a44374ab9643cd0f0caf0fb6697417054944b56228a22297574df64","22334ce08b4f33f031252a9b7a089423436312a37092b6e742f7471c7ed075e3"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514341362 · entry 108e9186e8c5677a67a1…
Expected log hash
81a850cd5c32c6b6ee86a2774571659cf829f205adaa17a6b9e9a6f5bef7642d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787126744998","kind":"published-quote","locale":"de","page":"product:sevdesk/buchhaltungssoftware/de","quote":"Zeiterfassung in der App fehlt :(","rating":4,"review_date":"2025-10-08","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2cd516e344e4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.