Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ich mochte diese App mit dem alten Bezahlmodell sehr.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3082153890

Proof data

Record hash (SHA-256)

83ebc37a6542f220ecc74fc3492d71e02a0620ac72ea37eacfd76125fec9487d

Signature (Ed25519, base64)

IVP54obIrFt7abZQzTVAjvWy03b1jHkOWGPjzGA+IXuX4BjFhXjsblb5bNfxrYOLL65t4ah6E5VxnBcKWmlFDw==

Merkle root

400ee8bc8bb6e48ec8bd5ac7598e893e5cb7545daceec4f0578b6b1d061e7911

Merkle path

["83ea8df8caf285af25566064d79f186edab84ed03cb2cd9e2c84d6b1b738a53d","720f77b89d80a93714bf0318985f31ff312d4c741a187c3ea801a4d81d9ca198","153a971888c3eaba1027a501d13033c8ea7bd36e78ce3df1557ea0d4a6c587c2","3bc9e76f35ae9b9c5933a9f7bb3544ecea0c936c19f74d09f866d101de3cf414","971472a95ef1e8cc481817b63d50d67f040e32345e5220d5a2405428579915f7","343fa2d9f8d1930cb0a0efdb2925ddfccaf1a11a80cf337ce57d78388ef22a8a","f6ab2cc652884531bd478cc5dd47419b36238bf56009101ca360c1a8544fbfef","b9608d558d0996ff8dafd7967d98dab504aa0e4659e0dae6116336f942274da4","cb32c31404b02d75257897dac63f80847758caa60d6aee2c2c69cf01ee6d4671","172db9003cff95dc0e91501125b0d9894f7dda469fe28d8fc0b3b27d4af83a1e","51b2669b95acab4481a4398936b8e5b5ec1d174169f52805bd40ecf2f09173b7","36adbedadbce95e18582f55239fca30afcd0bad4c875cbe806563790cd91f402","68bf526dc9fdb893e550e95c7890a8c2467db529cd53aa55191217ccddd847cb","1b72b963c38e15207167888e88981f71162df61318539ae68c46b7dd3cdefe73","da3c78d15c3e7e744f2949813be9d01fa753f12e538edb94a65a960b11043d47"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3082153890 · entry 108e9186e8c5677a31d2…

Expected log hash

cff4076b1696aa395d1840cc38c433580d1b7821d298d64e1adff5db6503370b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791175845570","kind":"published-quote","locale":"de","page":"theme:everand/delivery/de","quote":"Ich mochte diese App mit dem alten Bezahlmodell sehr.","rating":1,"review_date":"2026-03-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.scribd.app.reader0","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (400ee8bc8bb6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.