Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is very easy to use.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3273342496

Proof data

Record hash (SHA-256)

843c23ab8f8e126122c363202337b57501d3a65c2e81ca011ffd286c2dee553d

Signature (Ed25519, base64)

+QZmhej95eQaBU8x/jcWLEKJI7QGXz+Sa6mum1GH5FnxXyCjEvTSZpWgQlpvjO6p+SG+99AOtXnEXHY81vQPAA==

Merkle root

a6a2b4c9d7d1eafa4a3ba3595aa08f11c105165de84940ffc059f837c445104f

Merkle path

["84430b8dec072cf00604abf5d4fe5818c07d6c8337350c318ec78fe9ffc7b1ea","8bf71fc2e45fc0962c476099a1e81bf0e5547d165fb8cd3b1da8acd0a3d083ec","dbfa778e443d7b90beb86715e041ebc4693f261b44c8e6e553a3c755c3f51f14","0ab82ac6b37c50d562809adeaca0c9096bc31a8685201a71e980d30615bbe7b2","a607ce9cd02454ab545c2cd973eced2318f98774a95d6ef90788d23d2483abc7","ce59b1788422fbc09f760342ed04a69e309c18498e07141a2cc6c344019638ee","a1cd286cc12923f393659f36b59d00c6390dfb60bc41543c8eebff21c67ed25b","af3e8ff279a4f0c4946a0b3c41420ea8142557b4bb6cc2d70508cb8b522f6f34","e5f51bbad7f780344bd89b3ec814cdef836499bf7d8888b236ecf1c9cf493f06","ad78de3865345401e31274f3a8e3a5c142a44793194689730077eb4bfc6045b9","aedc7327e78218f6280af7155f41fd28935caa7624f83e92db04a2edcd09644f","2303dd26cda116a8eb0800a8bc774bd2f257b5ec2193ff1cb7ee613e1177a153","fff493d2d253462ad7d864285021e071d3afe7ac9b0c40aea8ee31ecda85a42c","d9b9cce27629bc902030340ceda068fb90d53ddab20309d3b3d8bb3949c170f2"]

Anchored

2026-10-16

Public log entry

search.sigstore.dev, log index 3273342496 · entry 108e9186e8c5677a66d7…

Expected log hash

8a8ea4260f3039926c3342603d4fca7ca9e5c627d841ac1c7142e303a049d0c7 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1792122420855","kind":"published-quote","locale":"en","page":"brand:lohnsteuer-kompakt","quote":"The app is very easy to use.","rating":5,"review_date":"2026-06-18","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a6a2b4c9d7d1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.