Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Schrecklicher Service.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3178115911

Proof data

Record hash (SHA-256)

6b9c9a25846f46d6605848c94d2055e1f445df58621734b130793f460ddcef8e

Signature (Ed25519, base64)

XNUwbW736fBGNwaMhihxiy65igzOltHRWLH6TIN/lj4rcYT6sZSBWP/IaGkthg529JF8VbNBYGn5PFGbesU3CA==

Merkle root

afb9ffbb4b4e88017e1c868247f919ebcfe69f09127d391e7daa08019eb2b63b

Merkle path

["6b98d6bab8bdc7ae4ed8730b3b3759be7a80632638aff492b732d92be420808c","5ed58c45375dd306f4cd0535ba9bb1a2f8070c14f399590b6f22ec3602548eaf","26482f7fec6a93220acb4b0e425244f6b642ece8a57cc37aba6def8f774373d8","293f41207847c1bab92868e604058140fee943b64ca24c25088d04d65cee5064","52753dc00fdd6ce9da74b8deb0923aa30944b265e3bf40c92eea37824aa05217","7edde367b975e16adf5ed41f7cc6fc6d22fa6bd42a3044dbd5b7418bca3f7543","33b3c482d038ea0a0751c55b933cc6e33ee85d5fe1700791212242baa58fba91","f16c385beee63ea313cea070501a06f8a60b4f4732173ea20b0dfd47ac28d626","56dbacf705ecc60dfd08aedeea9d129f4f46ab9689e8b29c44f1348833abee35","8ed67d632d0fff67c57065197808b6a7d06b432596274a390ddf030542048ede","f4e0497c3741d064fbc1df1235b1ee344815a77af0d3676bf58fd9313dd47578","3adb37cc20bae46d15aecd43630c6202a7ecbb5a45648c120a2e3ddd573da4c3","cfc6855eeb5cd3bfbc64cd1a8365b676fdd5adf536ee2637beb35214ad734bd3","15ecb20ce6559654c94b8b858c027c014996a92eb19771813db0b794d6214fb6","72bbc4ee0a973113b1d556f76d02fea2c4704794a0d313a96e49ff7b6174dec2"]

Anchored

2026-10-10

Public log entry

search.sigstore.dev, log index 3178115911 · entry 108e9186e8c5677a2bba…

Expected log hash

a144ffc32dfaa9fe45b4895b7f4c17280667152868dd8de227ca2811c60c870f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791604579182","kind":"published-quote","locale":"de","page":"brand:spotify","quote":"Schrecklicher Service.","rating":1,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (afb9ffbb4b4e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.