Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Warum muss ich im Heimnetz sein um die Maschine zu starten”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2907673729

Proof data

Record hash (SHA-256)

3f395cd245728612c93393916804c147ec7d6aac9e83321c471cfee8fd29106a

Signature (Ed25519, base64)

i4HkOfD1ZENkUddaw54wA5iX/Yq03Hp48ie6MzZ4nEobgyY1Wbzjs2Ar+L4D2x08xeCMVh8a3cIV/ea5s4QhDQ==

Merkle root

b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02

Merkle path

["3f3897c5feef5ba5ffe30416c338d877d8793b8ce61c5634e6d0b6d10c18628e","25bddac825ee085ce0c02dc25e4126837b098cd4f32adb7930b6e73c8e631226","b192fca420c0807379825b5f47dfcd18d9cfa33b6005ff7e160ff1d6dec9d837","5e10dc7084b090b9835370ac7471d4924c8767f40aaeda1e6865177ae8207953","36830cd66141e1631f79b9d4aada1f0932419ae237939b55cf6198f78f2ad94d","a7447a2a81f775199e2872cdfddc5af8ef6de5eb570c448c687be44fb5a12e2d","67f5b3d9cb9a2703b83a2e60f2a112357dafa8bd40cb1055e6cfa4da82b7b82d","bb772b872a230864bb808a7842176fbb2f1d73ac18765c28f02dc892bb381978","965326cc3aca9f1e018c411231021c333f0fe9dec8094edc6b123c468e0d0819","34e35420835bd035428ee6ba0508bbcebd0c0c54161f809f6f5aee3b8f404041","84f38e58aa9ec2492d7a36a19128adb6d0495321f292dd44bdf4301a0db4c55e","94e922a61249c96280c1295d8745a971a94793a7c2dd589ff7c2b71a4d71c1e6","17354708d69221dcc11d442a2ae8d1a8fd9ce3422f52e63a29a599e2bc987d3a","7a4792c9dcf9466d19ba61ec3efd4f578e21f2d3035e8fa6a6264d3045083f7e","43a562d6822dab12c673c1efa0a3171d1ef69b949f676fb01847e1e5b56274de"]

Anchored

2026-09-22

Public log entry

search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…

Expected log hash

bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789969984102","kind":"published-quote","locale":"de","page":"theme:v-zug/ordering/de","quote":"Warum muss ich im Heimnetz sein um die Maschine zu starten","rating":1,"review_date":"2025-04-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.