Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Login somit unmöglich und App folglich unbrauchbar.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3668793196

Proof data

Record hash (SHA-256)

4f9a4f1b822f0ce8143619112c1ef5d1a8d05d9de0ac142357f3ee5a8bdb6a00

Signature (Ed25519, base64)

lVo0IhLILC6oDXDW/WtWLCJPln4iVhaSeeSlFryiiow56BJXIv6jEc/8AHfbhdIxqqCRp2mzKMuU9aa6e4geAQ==

Merkle root

8552de27836d9c1d73f2670cf2bc11df6459e7443d47ace4674278484e3a6d8e

Merkle path

["4f9f6763bcaeab0c2d50fc15971b25f4621a431dbcfd08da5304b5a45e697adf","74aa34517f9747f8b87d99f225c5bcb8c56d6bf37ded5fff85679ffb1c7757e1","f9b1d8c18ee71ad33459abbbd560f04fc94428610bbea95cda54923a6d970a2a","2ff04ff5e46aad0b2a188007a7d13ca76810ae3e4bf86ac896460a93dcc0d589","74c77d32800ff1925e2b377394c8ffa9c2fbb8e4656e51d79ea0483ece6dfa86","e8e3f5dd4c7bda70f9ecc232e136c8db6d259201215237ee1fd4b0d03180e366","8366b5433e6c88b59eb59bf29eb3ca4b01d2de98edec08d90284f822e5985c2c","24234ce9cf8ec85560e8da75b328592132ccc0683e53b1cc60ddbb27ba7d2b81","37aa7ffeb7d89b29faa4d6d7ce4ae86dc8eac7de81e980cce217b12b2ae0fa7f","7fdd65a9a20f70443524882968c7ab8e25b95dbe675fb38a9de77655a5c5a31d","904ada4e02e7a9ec661497dca0cc62df47a008d441fdb71d92ed6ffb4e1340e6","45057f17156ec0bc54320963b9b45c71ce884be753e46907ccab0604a5fffa2c","06f625e80da47a14c2d3e7027b88f7f89c63e459e05ddda58b98e60b36bc2518"]

Anchored

2026-11-03

Public log entry

search.sigstore.dev, log index 3668793196 · entry 108e9186e8c5677a8c91…

Expected log hash

f099839a063ebfd0b66050d615b9645cca5be77075ecec449f1aa0148fdcbfea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1793706932685","kind":"published-quote","locale":"de","page":"brand:jobs-ch","quote":"Login somit unmöglich und App folglich unbrauchbar.","rating":1,"review_date":"2026-10-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.iAgentur.jobsCh","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8552de27836d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.