Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“die Belegerkennung ist immernoch sehr mangelhaft”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
33897e620087a8b1170feea715bc8c8d3c1b2c241bcd78ece21ed313fbd4f149
Signature (Ed25519, base64)
ViokK4U40LIGOrHX0YmGUmRXT/IoriaGpLxi6DjN5Z43UuH5YBy7juC6fUTaGs5Uuuf0/+jxd9Yw54pa27/bDg==
Merkle root
c69b412346f0db8d88aed17dbaf2e4876a3743c1c4d16fb306ba56b5c0573123
Merkle path
["338743cf96d988ec231f7f1fda31bd05e78bed831e0500b560c875369e3941b0","cad7fd062973eda922469fb6a28052c945623b84d4c81def718643eb9625039a","140294ae971ff4924914f0ddbb26be609ede17623d13082de348fbcde1fc3e21","20d5b642f3b216c1b4830f1fa7d4247a5d108a0dfacfa0e582e7fb984acd6c62","ce05b2c1fe6be784a82b59f4247dc106afd87adeb9636a874cfe0bdb93171f88","e935fedd81b22787a3930538ec1be08c82a4f01bac3fed12af56999dc9850ee2","ca642bea692f55dd943849d62d6b76baf5969e65cd6ce22a10d2eda0b6cb20d6","a072d8363ae210519755a4bc2b7b01eef909589aea3caf4723f666f9983981af","53b7974f794956580b97b01e5787e9494711c5072cd8c4c647978ce81dd73b04","f0547ad2126c3322f8027bfb95e010bcc04b7a70664a0ff10581a13bc5d92f6b","fecc9cfda4d079bb6779f94df83adc6c4e19223f60f78f66f39dac19284edef3","6bc505cec9cfa6c65890bf4e5567a5e9c41915dc5198970e3883c998d4888fbc","2902401036646228e991cedada72ba594212cade8227204cfe8c0e390674d7b1","62927e8f71080777dd1935c21221e60b742dc0377a31e2f20a0a64cf6c3282e8","3da38b679e2392986aef224a332d14750fb3a22c4e75287765e8f68f575f24f3"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525010456 · entry 108e9186e8c5677a4287…
Expected log hash
659be4fcc7663b2dc65a53351e16497fea44ed9ec8aef1f3c48c8e452b350dc6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787194832011","kind":"published-quote","locale":"de","page":"product:sevdesk/e-rechnung-software/de","quote":"die Belegerkennung ist immernoch sehr mangelhaft","rating":3,"review_date":"2026-05-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c69b412346f0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.