Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich nutze die App nicht sehr viel”
Google Play · 5/5 · 2025-04-20

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515439294

Proof data

Record hash (SHA-256): 5896c0dee5eedde2176be6c87f855cf45a11230f8c2742d3caf12f8603c9cc43
Signature (Ed25519, base64): UNWpnYxJdEdRp9CawyNcGvcLO1uK6wZpBpTLdXYv6ApM1jVV9WX7iQBVis8emxse7MIy+IZJ5x+9qGIVMr6qAg==
Merkle root: 8c6268a14330d1a3403c561e774645b0671f81571ec1735d4674ebe1de7502e8
Merkle path: ["5894eec0146b97b48c780c14979b32521c16a554330b20ff22b2ea573b263a83","75419497732134bf2d9a45c419a9afdb358a855bed066b214f96925cf84f993b","e673f345a8b9df91f097041ebaf7e94cf02b140f62315d36d79df86a464dd309","2d0efef454eafb061237d3e6c65a67e58883e280f8c0df36d64b63e3cc9656b4","dec23fa97484abc5a68de1bcf5da9ad062eefc8b6cf036469c0c438fdcfbb93c","e75f0af67536178e2afff50d005438e1b65333fde8a516d699df6c1853776188","d0893d4f6d0ce9ad3e98b62d4f4875e5e20bd42e0bb3d3cd2fe3b7818e059691","3dea123e6ac79decac6187a15c5ae2d4fa5ee5c61269198eaa2be6c5ecae1675","7eabc17144bb4a1698fadf40d02d7be2f33b328abcfe5dc07160aa7b897b6d66","770ae95192f6b0621f994dc35ac293aeb8627dd5427c996f3f7256f722c30924","d0813dda54b5b9baffe4883c8b127dc350392bb3f217f0b06dc539311cce42c2","ce9833effd2f39af4fa94d48bdc09e02b01e7a4f23193cf643032d0af108fad0","a130748e37a17fa29f4013443a16c6ba5d7fca63733ddc833e40182a59b453a9","894fb50f273584bf006781fb08f5958320d3e5510a31da0d6339bcf63d847254","f548939ab1bb46e2c6638c372c3e2eef0d561ad18c63c15229fececc951e0b3f"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515439294 · entry 108e9186e8c5677a4f15…
Expected log hash: 128701fddbb19410bf57cdb2d04d7a0278d13bcfda6410d76f176fa58341e1c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787141082461","kind":"published-quote","locale":"de","page":"product:relai/relai-business/de","quote":"Ich nutze die App nicht sehr viel","rating":5,"review_date":"2025-04-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8c6268a14330…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.