Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die App ist eine Zumutung.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
33b3b84fd05b0442540923ad60299f7be97a82ab730fbd7d7e6abd78811529b2
Signature (Ed25519, base64)
xIYiIjApgqDGdYQJFdRrLqt3niyt+wiWDBil1VT7kqZRgAgJOJxzSFfWLKEICuNYu1ShKbIs7w8C0U63vEpDDA==
Merkle root
c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path
["33b5b73c4154fcbebdad8a6b46ff04f73993c7fef9d4cbddea540e60f448bbe4","66a729d5086e0bec1de7050907174f80aaef1dfd5887b5b474dfd6ddbdc4dc92","cd446f32a805b4dac01a18ddd5d1e8011179c4e6ed31ff61d1b546d7b9bdeff1","fdf9f2dd9f5ad2fe5106b0a069379d9ee37caf09e375b355d6e6db6013baeb86","d8927e2ed403dc6a8534cfdf7f3fdd3732c666f8a249b400951f6efebeb73067","6699797c295b9b67b2957d6f2f51b3883dbee6e8438d72385ac43bd4f60e34bc","ccea89e147fbb05d96f400ef20c7c5120e2d4b587708d575eae3dc95724933df","f381a0a33b81e94df3b96989bb56a59f526afb2b830eded66305cbc8f71e0f7f","77280a75405e5ace3ca647c61c1f871fa9436dc636dd27839c202ce9711543c2","43feba2c81d54b510f6a791de74f70e49c2b2d59a23d20cec4f12fefacf45d24","7c2f01a72bcfe138e5c2705862eb8c08ba2ab74ef4c27765544466dc0bdb8a57","a7bc10fee28f2981570ac167ac37dba5147bd7749c0ca1ebb5641065ceffd258","cb9c27e685a1a40adcce5aaa0d4ab0bc7c89b1edd82b7ac213f34036ca479ef6","47f7935efde5c1916b9700110a56050667a486da6d01efbf1be7671f42769e58","2d9d4b958999e2b40d6b124a0a8044720e0313c217d237832e6b1171798873d8"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash
6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791183579482","kind":"published-quote","locale":"de","page":"brand:swica","quote":"Die App ist eine Zumutung.","rating":1,"review_date":"2026-08-29","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1451930779?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.