Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“die App oft hängen bleibt”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5aa87490cc61799915b023ebbaee0c93d16edad988511c8c9d4971830fec9de1
Signature (Ed25519, base64)
rfrI0VPOlckfn2/k6WO0MLnCcdvxmGcngCns7iujnyuft02hQLj7XR3cqwQdVLKqShbUqYYhcRjBRP1dwyQ8Cg==
Merkle root
61203b6d05350adaaef087cbce75d25fa5ac2036c1a66344255fc73a224d39c3
Merkle path
["5aa8844bb6afd0a772fc82ddd5d2a1ff8d5b179cf94c2f6e68eae969f293dd19","68ba5c4bc1c95ad64658c4a47f534ccafe07683b59c329f10196c45205e87b9f","bb5df2a8b327a82e04c4e68e5eb760a774c484fee2d4712ca3a4a7296f1ab29b","1efda1f0b1063fa89cd8acf1d50fbf59a08cafd1b1a14030ac4763ff830e4c62","f73502aaf31e83de28738217b28d49d4df5906161dd3bde6c44c372a824131f6","63dcefd25b1c9f9a75ab30c766c67add6450e10b50e9dcdfb8c7311a4035da45","4f691305911ce20d0a4afd85616185d63da0b4d6112d1e3efe95ece40a52b7f1","c18a8e65eeea4c74870ab6cb20eff6c21cc350de92d9d560cef729fe50fcaa11","196faaf9900d6b0c00e95a4e94e66c7721a1721ebef1a607ed885db79b652f88","f9e3a92e84d9f77fc16641407f1f44ef0aa4ca794e68112a7d6bfa0af5948a5c","63dbb9075362a6ca4fca4be1643d7b4d2ca85712beb2c771434c7e07c3fe3510","2dd7436b52ad095029060b52ae9fec82ac525b3414921c225849ee17eb82e133","f4ce7da97c251bc798d3dd7f50e69529d587fea515781ff7f75120076a0decef","8623ef0c7509529f19128084f674283d15fc3b4b9165c3273da961b1c9f411fa","d35a1781f2fb2fc9cd66aa22e2ed6cd805ebe75af0ac2c167c3e4444a0a6f362"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3100032352 · entry 108e9186e8c5677abe62…
Expected log hash
0a0ca7b748f6c99c5a75a761289092bb11c807eeee08be8ec366fad5b0bfd2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791253605372","kind":"published-quote","locale":"de","page":"theme:zasta/quality/de","quote":"die App oft hängen bleibt","rating":4,"review_date":"2026-08-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.zasta.app","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (61203b6d0535…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.