Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“die Schätzung die bei Taxfix gemacht wurde für schlecht programmiert”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3122521988

Proof data

Record hash (SHA-256)

954fb1f29ddd62ec4f5a7b9dd1958b8fcf2e7bc365dfc60b123194b56bc5bbc5

Signature (Ed25519, base64)

Cc4KEn3BB0nvHUWWoIvAx0eaoCgBWUVAIqAzZxwkc8azrdItb4mZBA0Pv93xvrzrwNJwuE50PFo/u70JYtcYBA==

Merkle root

feb82b7f8aea18b46b248fac49fdc21a6b138fec64dc2fa12c4b3c7a81799706

Merkle path

["9553fd9d1736f2ec1bdcc7e2bf3d1cf2e6f6d019c1426eafa29d95ee72a638ce","9d98fd906efbd0f7c5cf4b1c4d1c759ebbc9f501a8e58305f64a1eef331e7625","c5e0f09e0ddc9869d88996526d0fa712c30ef15a094a547a7cb878e5631c02cd","d09a1c43bc50032fc19612a5be1592a92f344fd10ce3e60779b834487c011bd0","c233fca53f4c81b359858d591ef03eaf00a0a742f0c735a485e53667401d468a","0b05a10b9a7492ba6710a2bb65da1a2f0bfd82d2e0ad92e313c1dfb203e04ed9","5790a8f2f8f70e1fdc9af267f62efd8e5580d54d4e4a52591bcaffefc87cb983","bd0a2916348d2281272590a614c774d8430b2c2e3af2b7d576803909370527b6","154dbde8538ee0a1aac86c5bcf7a4fa8ec88d090797c265272fcf052ab3a2a39","2d44f2b722dd1f2aecd1d68d1bec808b40b57818495fac8ae57988e388d81a68","548a1388f5bbb20769737de180e65c5652dd2de663f2214f0d78929d7f7a8ea9","84e9db05dc1bc33a26dd34630e5e846140b5b10b0314d72127919f78aadb8986","1d54670809e69bf752ad8bffe873338b97d8f082eae7a8b6e69f26b1c6838f8a","83f42ac660298030039657fba665d1927c984fe4ba1e35ca5fa2b9345c12df0c","3520002e20f205a5e2c7683df52b5c77fe454ada68a85506f659d94f96d1078c"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3122521988 · entry 108e9186e8c5677afa72…

Expected log hash

9fa0d177312c5b0b22ba9dc313f3316134d71d179dc19912df4abe4610de68bf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791343163559","kind":"published-quote","locale":"de","page":"theme:taxfix/quality/de","quote":"die Schätzung die bei Taxfix gemacht wurde für schlecht programmiert","rating":2,"review_date":"2026-08-03","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (feb82b7f8aea…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.