Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Schrecklicher Service.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3becc865eb5e9a0fc1e741cf7b32420a12e49c041cd5a33761d6eaf63930a456
Signature (Ed25519, base64)
7FM0S5FaqDXa4pEkOyVvPvAJBpjGFyZqBE0fdHO838cxbaU/bMGmWdYIyceHZXO7vlHuUHCtRlkRQL0KXh8/Aw==
Merkle root
f2dea3193623a59d18b4d230cf1484689c024b05d34648a4bedfef78c47360d2
Merkle path
["3bf03ffb90d9c09998119cbfe7dbe16318266bd01949431cb02841cf63f9292d","0d2da989ad59ee3a44aed8148a10730c454c027cc0b2a325adfb23a1fb69bf25","57a01306d8c476398f9e5ad84b4debe763e1bc38b97c039ece8fdfcec17fe724","33237b60b055da77ac904e6975544ff1d8f23050eb12036b132ea56a3f9464b5","bd3a309d2688cb9e0665faf1878cc3043d36f94f643c6eff1d05cdfe7db3d5c4","afd092f9b44474caa6e2ccf5e1adf73f6fe243b975315bc3008fdaee762baf20","e273bb8c10745962e9e7c0ab59394668d037cbbf8ea5f0ccdd0734b6f8957aa9","f8c2104670b8dc9fd4a9ecea02ada6ae1c0f5399c23e7e8b2baa7995099c5e6f","7835bd12f5c5d7961aa6880678b549a43ac8d6d64d2f0b499531661e184768a3","5b2408da5439c0120ac362ea7527c3fdfd26138b2b8bac94369dbfb754341687","d1931bfcec17fe831a2fbf259b6f3318f1d317196fbac95a2735a74f91cc308e","715d236235ab3fbaf6a917957cdd41b2f2237b3d300a52165824ec6ae8022bf0","0e0575856f98ffd7554131441cee6df44050461e83f56abb9d48db09201782da","c3040d35b4a41a3d91fd7f6d8e1e6868620c896bd0ae8d09b1351d70693bef08","658fda4333b0a975ae51c0ef52c37c157029d897878579fb5ff3ac48198b1bf3"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3163461995 · entry 108e9186e8c5677acea0…
Expected log hash
1e385e1035f15f3dbe860bb8f3e4e850b8c2ce2b31edb58c97be626995a4adf2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791544610158","kind":"published-quote","locale":"de","page":"brand:spotify","quote":"Schrecklicher Service.","rating":1,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2dea3193623…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.