Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App stürzt direkt nach dem Start ab”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2929513415

Proof data

Record hash (SHA-256)

38e27715f17912e4b9fdfdd2644849ad2f501dfc1ebfc8f4aa9bf59e289d9fd7

Signature (Ed25519, base64)

qlMh+4DAswtqrICCYb6OJ0+5ZDsgtkHsJL7/NfooiwolaartjrSyytgIm2iGX5rFaOl/7EQHyUAcYYZfDPG8Aw==

Merkle root

277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2

Merkle path

["38e016b1311cf2687f57a7950acb14d7ac9f3e825c26213031330edc5baf8a32","35df3f28b6cf2f5fe770a6b4bca9b2aa129443e52ebd8474ef0562a0b8a54865","d4deab2fb18dda285b42c83c405897329a5d99909902a90b0b1717b1477abfad","035da4aa6155bf9429123c97cba4eed46aa99ab114bf06c313f8c70f6278c992","ab3d9e7b09b13463274f75d290ddf695de5adc8119bf1cd3485d10b93777810f","d4fefc5217cf849127bb570002a67bfa79e84ab95adae806269516ca5ff68c2a","2ca0620b169bb1de0616b0e9fee3bf8f83b6b0383194b3651181a8b0234ff2bc","311a815e4fc5777cf9cc5429b0be0b6d851faa025339ce055a6354b63a116589","c61e46485321005a739d20a91f547689cba08657ebf8be31600a2e1ed8f70440","9d0cae652b3866f1a5a9b992be271270b16dca77b9a358aaa2c81a9b8494a6d2","0fe72dd7b884e68ec55a5513c27236320948d03fa4055189b9d524590e7969f5","abdb4cb8468fb2e434f199746ae463f161e11fc6274d5794bf3379651080b430","c68553b05062bff5e92df6fc931b0fe41827a2af51cd30b80fefce371f89e614","1f7b489a0f1f52a9099db1823d706668c4e68c1e17b4e235c9596001eb5af1b6","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]

Anchored

2026-09-24

Public log entry

search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…

Expected log hash

9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790137911951","kind":"published-quote","locale":"de","page":"brand:fossil","quote":"App stürzt direkt nach dem Start ab","rating":1,"review_date":"2026-08-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.fossil.wearables.fossil","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.