Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Fazit: Schweizer Premium Produkt das diesem Anspruch überhaupt nicht genügt.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2904877428

Proof data

Record hash (SHA-256)

4c1c9d82e6397ec6be0d8b59af7d5d39430dd4a005e49fd339e4cc3d149307d1

Signature (Ed25519, base64)

rl5sXLk64UAXWZdDWTBfGhbdY3mSNxN+4Ee/0tEH+CwuOvhquf8qsOvRRmMmm1GmNJWDjUutVq5v9MHQVuDFDg==

Merkle root

e299bf38720a5a91bdf63bbc0205245bccdf3432ab1652c69342549658b7a9ef

Merkle path

["4c1a7b099c340a769be7160ec6eae4c675a3d3810b1ae733b0764af415b9e85b","3e045a5ed068ab9b84713b74a29f29b40ab192dc5531da86f2181582c58d9b68","d8338cfea7db09ff8d3d66ceb55ab83a2de9ca17d79a95e2de4bbe3c973c6691","d766e16bd5ffacf05eb59352bd9571c9844802d0b44e5acd7dde9cf6172a54e0","4209e18ee9cbed49217ae4c9960f70edb3657aa2fcbf911f933a3765c53fda73","f46975195f16fd60975237a2f1b562bd1e3c2e86dd10411fbfd76ef357b998a0","838cc259baa01fcfb3d92726ed1c6e3a3120740385686c2a5604b52dd2dbe471","fc1d4ef8b6069521f8337ff3a4cdbb010a3093cd1e50de7f577aba9ff488f60e","63f14c3d1e13d2ef45740ccfacaab6b9e941c130bccf6f03c69357a0b8ffeaa4","1644972b0586a73ff1d58bc99f9ce298dbd629c433078606dee9c471487bc961","057db33d4b111314407fa33fce072040faac3e5b276da3d649fda548f99556c4","44c08976ee58b5cb058f11ca9229b8780c4a6cf8c64bbcf43373011c4a37225b","ac995c9ae640659c6b258d62d0cad1933912ca122fd33d27f90560dfd3199a84","aa4bbeb87247c2797626ab02a549451da6dfce4dcb854a36fdcc601e3e788772","bce5d442c07de6307e5ea8947098e74ce88c2246eda5e5fc1015a6d7519228a8"]

Anchored

2026-09-21

Public log entry

search.sigstore.dev, log index 2904877428 · entry 108e9186e8c5677ab408…

Expected log hash

d020708737f55ccdf49203f373fcbcefe8158cc388605556fbfda3c365de7360 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789881486272","kind":"published-quote","locale":"de","page":"theme:v-zug/quality/de","quote":"Fazit: Schweizer Premium Produkt das diesem Anspruch überhaupt nicht genügt.","rating":1,"review_date":"2026-06-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e299bf38720a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.