Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Once assigned, it can no longer be edited in the bank either.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514130917

Proof data

Record hash (SHA-256)

3309e3f77836b90470b943f4fc47a524007b9691c1a034ecff1fa76372c40ea5

Signature (Ed25519, base64)

HvZWzUNjm/k0fStcx4sIzH/Klf0I0DLmvuI+kExXZaFwSmDgw6/juK/zwdGZOlZtzgNo8u4K6gg6T/qLljsjDw==

Merkle root

72711ef72b8a7ab084630b9628ceb2defcf0aae546304d44ed173db57929457f

Merkle path

["3307ecd9ad53ef7b45b0e025aa28871e1b6f04d5b5b1ce771aaab3493c754a37","b6047aa5094ba8be167b2ac37c8e7dffdaace4a12c9d5b7f64665e90aa825c43","515837ed68dbd13e51bdb7e24011faf9793cf98fd7ba355c27af90a991a26ae9","ee15529e2ef7c1261b95ee0e443c3009916b0ce6a4f640b52250b6c49a32ec9f","be887c30bb13e558b7f05180356ebad43237bfb07e881d77a4e93770b7c3e743","e244641ffca2c8209b64b64e21fcd27df064a84b05fc124689c76c5ddd2170c5","e5b78a1de35dfddf1f248e8e806a750459060fcdd62bddfc4aa7859acdf6f3d7","caeb8c41d7aac2f23f443fca97e68072442b4d83f9700ce07f1a5ced04be2cf0","fb204fd80976c88d93930c27ea990d30edc4ad8b3b7d8f817db3404f3c5206af","5b853748ef0907789bd23256bc6c9c51b36a1e4c0731925e5c754b27ed10664b","704c1ea6336cfa234c7775ffce8e407c729087dab062982b313abfe5d76d9571","d760fafd0fceb6bb57ae211fe70286a725e62336ba110aa3d41adb817525dda7","df0544cc6d117b2c1219b42bc812fe38a4da44c84c48c7c3bc89f0690bd5d665","768946b507e7dea873e9570265486799703565faf3780e57d953562adfb568fa","6eb04938b6a483bb163369a1d918b32576dde0943755b89bf4c6d18743828ba3"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514130917 · entry 108e9186e8c5677a3273…

Expected log hash

65ba51eff926c65ed0ce093a942d84c628d811a59302f32867c6589627e47792 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787124488047","kind":"published-quote","locale":"en","page":"theme:sevdesk/fit/en","quote":"Once assigned, it can no longer be edited in the bank either.","rating":1,"review_date":"2025-06-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (72711ef72b8a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.