Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Mache meine Lohnsteuer seit Jahren hier schon”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3029042635

Proof data

Record hash (SHA-256)

9fe7ea5418ad329d296bec0d07d34186a72b94251407432460364d23303dc260

Signature (Ed25519, base64)

t5FvNGws8UPJo5rLBiZA6ZPwrdsUxayk45JkxkxwnrsdSL+7HhBgJoBvElW6S32ukln2XN9gA48g7Lw/vwBhDQ==

Merkle root

c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d

Merkle path

["9fe48398a54d7648819329b0cb0a35c076cfa1b86396d18438b12b50ba3f5ec7","bb774ec1f96d8ac8ebde43379067500ba77393e6332ab093d0a55b41562b42da","7e7138e72b3b13378a9dc216416d2d4e2ed5cc9c7978ba8449047881981bc804","5232981fc6ee2a5b1fa8bb25387e2dce11af87cf5d3d3352a5792797cc41c06f","3aab74652c8a0d70eed1695d8c9d4f9cafd5250a3d4c4f2d67e01934c9e0b6d3","7d6b94c3dea2d50ab4b721461b6a9f0ef6a2bfc06837df9ec5ff1df84fa96422","e44e81e1ad50b27cf9ed03063267a1ca79bcee06e0f8d1dc38eb8e0f152e6826","4b220dbfd1c0b2fcdc6ef492e15bb194b32229a2f0fe4224f79116cc801986b8","26f5eebd95a0e3a23301cc85fc35cba57b847dc3f1ba8dafa8f3b789fff28b9e","3ba719a808b7b2219513d4e27de642c4e3e1252d29211d8501150021a1f3260c","e2e08293bb1cf04123395e881cdcf855573df63316823f18639264050e9ceac7","61a7bbd58684db7aeeae7eefa5216c69a33eb017625b68c3e139cda5fa8fd78f","4795d13d6bf5f17d5468f644d3fe22d721bc2ec6d3fb73a43613e87939855d23","1616c16ecfa49e18821de7767bf3fa1e1a6fd3ec2fa090ad2f10f8770da252c6","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]

Anchored

2026-10-01

Public log entry

search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…

Expected log hash

38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790741815621","kind":"published-quote","locale":"de","page":"theme:lohnsteuer-kompakt/ordering/de","quote":"Mache meine Lohnsteuer seit Jahren hier schon","rating":5,"review_date":"2026-06-10","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.