Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super easy and straightforward.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
83ed4f3f04e52c334b03b0cc16ce656d2b1bbfb4e9b36d362de6661266f39c06
Signature (Ed25519, base64)
sfqqeFztgrFpAr+psUikHRzhtlNbv1bC1xY18IMRLhKIQ7kah8azBJK9hb5G3lBr9kpk/yLkHsTvZDiK2KdzAQ==
Merkle root
9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path
["83e72ad4c04307c0b63f23aed7a52676f5db6a0f005c0d0dc631edc8f376b6bc","09a7cdbd22f42a1a0a91f7a0df3214d80f245b9f51a8b528a4eff8a3683f9582","74820d302d90084646d566fd2ee8e7181c6693201cf9b75856b2d3d309530336","f2d03e2da4f1ec8c7b2e3d3fd605e2661eeb6f594ca6637619cd104ecc0ff9a2","e221c3067c7a4e8eb0e61f5662850474918e616f941d53daee466625494b6056","0a5b7bd7e74d16c46b1126c8bfc4b06d9fdf596df15d52998428426686ada58a","05c4d4fa8f30848d9de665a243b33f13e93835aed4755d12b78b373ff175fda3","be696f1091306ce618f19c79f5fa7d1181e6c268bdd833fbda010b8aee34fe81","335e7716fa6abfa4151c9c2217b97b48ab1bad0d6e7e3d31b06b17eb7623c3c2","34f4e2daf7f28b31aaed97651b7cd4bad3d2645c663207c35ac4fa8c5777b3ab","0f8896f91a71d21979187d065c39daa38d6fced4ad57bd1f59bad43261a5d8a6","605d721982159eab78bdc43a500e63a2af6ccac929c957cf186f611e1f7ca57b","78676505a7a4e31eeadca3cd52e7c8dd54cff3cf24b51dd75865ba23f402c848","07b2decfe383429cb71278f9069f54d1b4f607f991c518b70357c1681514c3ad","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash
a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"brand:lohnsteuer-kompakt","quote":"Super easy and straightforward.","rating":5,"review_date":"2026-06-10","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.