Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich bin jedesmal abgemeldet, wenn ich die App öffne”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3288590621

Proof data

Record hash (SHA-256)

5d9e1e4661ed94989f30ac5e7db2141352bab43dbf6afab1e374b1d7505a15b4

Signature (Ed25519, base64)

thn2OKct5uexa3E7cizTn10+xSD5+CNW9prAAfJJ9PW5nxPXKNwbgHVGz+jpE+0l9gqF9viBPEVk2oMlcBGFAg==

Merkle root

5ee295eff08f25e1ca2fd839bd395df8ebef79af0e57c3d4ee8d263342a19422

Merkle path

["5d9f0f32754fde6515b92de514cf5157b4be4a9c1fdfa7018c9a0374e53e1a2d","eb917124c321ecbb27b0376cacd98502c373c897c48b85999485e18e8ef5a3f6","84ef5c0a83f27cd3f18ae60090c2942a4ccbf5a8c13fcc3cc4e5e33ababd9a20","372db8272d4f9fc4e49a7846d7f1de2dfbd5eaac4866d53b2cab309aa36c3fa1","396b9c1855dd01549ca2532b5145537117f838a741a7c8c2f3b603e9db254074","6d0b3b5554ac35da1eff3f97f6098ac9bfb2ad8a7804750d915a4aee30e585a3","aeeef64110565fd7f2fc05529e0712337c580324a6c726a476ac14b25524853e","aeb20a6e0e405b19446803c5121a85af827250951700177b75c38193f6ad7f1d","bd4a8d913b446b77da0a864159c0f40edcf8c954241d1d921ab69cf370c5ec1f","dab235d581e7cb75ce26f7a81457d0deaa17cda73d146e5555f2e95bf5703cc8","e8a1f9400dfd415b3f6e362eddb3dc9f1664163f9a2f4f8399b36feadb9f6c8e","31bf21bf120095ba7e058418d9fb4f9ce8924ef88f306ad5cf685b3b8d4afbf3","149a88e487e0a55b368195abac6188b4f1a5ff2534a675089a6bffcc120ce8bc"]

Anchored

2026-10-17

Public log entry

search.sigstore.dev, log index 3288590621 · entry 108e9186e8c5677a25c9…

Expected log hash

74cd7239ea435495013841baa58ae65725dc6474b09f06da03b154f0c5d58357 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1792206865504","kind":"published-quote","locale":"de","page":"brand:jobs-ch","quote":"Ich bin jedesmal abgemeldet, wenn ich die App öffne","rating":1,"review_date":"2026-08-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.iAgentur.jobsCh","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5ee295eff08f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.