Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“plötzlich ist die App auf französisch”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7e97394208e49b4794626568e32ae703af243124f255afd10ef38c72b2e22c46
Signature (Ed25519, base64)
UgsEivuWvgkkyGof607RksQeS2wV/R3HpdQhcdsJ2StVig650h5SbsaE+FqZseaBytzIPma7ifxIMj/cMcTrBA==
Merkle root
405d85333c1c03a7ae86f6b232380a3f0e8a386e4cd2c9bf5bd2480ae9ba2988
Merkle path
["7e9181daf16b3e1c9816e9bc20ac325de35769dd05aa6105b0fc551c3be08880","ae51f07a72fda50d7421ce82200e7a294f7cbf101587933c52832924f99a4fbf","6087c58ee05ed5aab8c6aa8d36bc1edb5bd9300327dc4be8ff6eb56fab7a60b6","fc7cd498384f4f59623e72cdcf6488bdd3932bef6a2d2ffd2e4468e3aab6e3fe","1fb3defc7364e7d37dc5e2e35f47b5c008142357003d823c0f8895c5fa09f25b","8550c73cc1a2e4b40aaa37998e3d3be8d66444deef50c868ae59627aa2e261ae","53f56bdefa6c6ae0d05bda1d9706329d69e1ba8244e4e434d1a9439e692a94d7","53218b4ab7e51f3e2be848b6aedd4b21e8d52534016b9baeea3e695ea5757c71","5968aaadd0ec1de4391c1e492faea6d4cbd91deac2bebb9095401b68ee917efd","ac8306d791aa15800d992d9af43a0b112be50516fc969e1ec3ff0f53091fc0b0","a24d3c486839a6f7e87794f42a44c5f5c316747bbfa69140f5f063292b8a451a","80b2b65d5a7b90a2a9c93b8e579e60760b83f1a839bde3918fecbb705d86c3bb","19a71f7971408d12f874f3ea09b06e4f9b44cd26f6dbc08d0466f033f9881220"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3668983302 · entry 108e9186e8c5677a323f…
Expected log hash
f9f0f1b08ea9ca6d951fb003d493c517d980826708a70b4fc99c8b9c98e286e6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793707617662","kind":"published-quote","locale":"de","page":"brand:anton-paar","quote":"plötzlich ist die App auf französisch","rating":1,"review_date":"2026-09-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.antonpaar.homebrew","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (405d85333c1c…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.