Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“So much better than my previous accounting software.”
Google Play · 5/5 · 2025-10-18

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515345787

Proof data

Record hash (SHA-256): 42c13a59d866d625ca79f03aac0ef72ecb3b259a747947beff46087081904b57
Signature (Ed25519, base64): /D1ZGCLpEqKl24cex5vuE5WGU8JH/OLZceIwElp2FqvY77J1Xw0miO2av6Tu9dxLNrTp0wcjgTmRPi13gu2kAg==
Merkle root: e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path: ["42c1af3546e1ccd90ecf2fac3be1d0c3b2a0243bb2a0e9174357b68d68b48847","4ba1ab175f4cac11fd76e1e08b03512fcdf0983c07812abb1d8d9f08a38e98cd","4f9c2ea33132afb3e014fc393e1ae4b85df85f94feb9c090115240b1793727d5","4efcdd0b44f0bdc247701b3bec9963cce7e47965538bd7f1ce56f7d5ac6a134c","3fb3b7cf48453a20c8302bc25fc754a2fb46d8fdd7c73cfa9d2a7dcc0d9e7df2","1e6f1871b8d17791e950a32152138b202b3407abf5375da52ae00144ca943111","4108b98af512879f207990c769ab856fc4b9ac54a99f01d490dddb6224bbb86f","fb05c996758e370e59377ebcf22a11c55c7295e55e959cf44ea97842c8dfbc92","1c7b2bfbd0b3770afa1d77e334ee2ab68ed8f78c289b9c166a34df5f2623304d","cca4fa0f1914bf670ca042a92e7e12a3b388871a260822982563cd01914af4a8","a32a9ef8d141ec8b0d82174a1469e752717fb7e843b688814f80891d028193bf","8a4a6b9a951ee701e26d66cca2bbc8671247325d1a66e58029543bddaab5580c","6f11499eaa6ce65c1f0a92a7bc0fdf2e1cab1385f61e7dfd4606eee0f3dcd0d9","c34fa5ec75d6e3462dddbe081b828d412a3a575b53cbb348f7047f6afbe95056","11a62e67a9d98d919358ca5b8855f911ccdc865f14b203213de31adc67657443"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash: d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787140356347","kind":"published-quote","locale":"en","page":"product:sevdesk/buchhaltungssoftware/en","quote":"So much better than my previous accounting software.","rating":5,"review_date":"2025-10-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.