Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“document capture does not work nearly as well as in the previous version.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
40ddf414a84e3ebf719bf4769cc7086c7881ecfc6fc0be28bfc6533d5caef591
Signature (Ed25519, base64)
bTWnqMDCEAL1pf/HRB3RdT432eHeoUI5c9DHktXFJ79fWeVKFUXJpMjcHJSzN1eFb9571R5bsBORosixYo9eCw==
Merkle root
6ddadcc7cc1bb0679f63a30d8a28a2a72e039950945f2d7276487dd5b703ff7b
Merkle path
["40e5d017f03ca1f436cea96a8864ebf4be29830e69356964952c938d73e89f30","0bf847fcdd3601605546040cd47a370104dd46b9df7596ac68314f619e615969","ebaf95dcaf676fe08dc9ea62e0b658762be45a7a54b30daac09d3b74013b0850","3938938aadcc121170ad0faca28b788ffc4d31f4d62e2f909bf6452e51a17c3f","657652ac6db84162e6da4048433546e95bbce810fbe2e8be9ad165264712f875","4daf3975d4daf3856a4c4f4394dd21c0fca3c52938ddb741e3ad07cf32b551fd","afa65a846dffcfa17387a5f46978a1d85e314b90ab371268e97e87c817899f0d","b373cd1e582a85c430d9c0b3e91a097eb520a407d5ce0743dbac0d13d1fd371d","2fe19e0bf0f3c47f56f3b730eb4bff5db4aaca010aee7eb3f9bb502d1d08249a","9c1c9aac501549535f4478a7cb82f157ff267d2604935729a966ee4d13d2a054","f5e3ca29fb0ac78ef0bbad905bbd13770bb7f25bd0738d9e40d991a6a9451c77","129f3894fac140085890ee362fb8453a35992f528eefdf93631f7a1c52dab582","60c827bc9e50a95b1e0b7e32530c3daf7f7a2362b5d4a48ed1e0b71eca730231","9e168dca44eb94549433cdf178f0f0b1ef27534c6f92f24d9664ece03a3c710e","052ac7d24dfc9659210f2718e5c7e6b2477f3dc364546bd6ed2bd5df9d14d7b0"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514541190 · entry 108e9186e8c5677acb65…
Expected log hash
adca5adcd6d3235cf084bc9b408d3e4d7742d07347957346ff2629f37429bf20 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787130614827","kind":"published-quote","locale":"en","page":"product:sevdesk/buchhaltungssoftware/en","quote":"document capture does not work nearly as well as in the previous version.","rating":2,"review_date":"2025-10-09","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ddadcc7cc1b…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.