Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“es wurde nichts ausgelassen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a11d5642a3c2c57dfe06508e24b24f8da545adf401a409333ed5c7f262a2ea20
Signature (Ed25519, base64)
u88uHYHMGkkRrxxIvpBCaxA9ktJhMLoQGNdhIr1he+NCGAXIubQKrnLTbYnByKl+TIL6z69nDMkX9+I54mdSAA==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["a11c8f43de78dee95b99784be09a421e8512a15018d83732258e54f8897d18ef","b12b361023feae0fc6693eef3cc9aab570e3118eb98af831be6076a4851f52f3","88ac0db60c20358bb3faf7d016b8302164a532450a52f5db5f11a8bdf3e1d5f7","bb5b8dc28eaf8ed3e97e0689798442caceae5298ff6d6f641e3863481d37a82f","08f1d562b10feeb2bd84ed927f5795980886692b2bdbd60f9309dd6c4fbdf11a","b1de2bd68c8ef733e12b6cb0c742d7f8abdecb7a0e29d77aada97618afde9a10","30ac08986754f4bc96a653864b43a78db37a97fe29fe34d64beb05fe6381e5b6","03304a9c4fe8aca427d102c79bb6e8caf4296c606e5ac287e30d793a7ed13666","8005e2069dc24fada1efd8f54743f8ca40db0e8c33e3ed02e00f7073e71a2d23","660ab2a4f285cb9333c47887f93f012cc2ba54578099c7f1e91611399249a344","3d80c5ca5350b25b950669d08752434fa90f2376b55162768840653a03852e81","2bf1b458738469a40c92ac31b9aa588bfb71aec0ab8fce1bd7c62a72390ec53a","83db60ef01b99a503ccd6a6abdd52daa1b692b73cf5b978606f8d217f799000c","00a544d427d2b0ef6286f24c44cfcf3a5f82bad04bf6442e459c003cb18785c1","10553711bf6721bc3fa0f227ed3bf669673b7af202d9c22d19db8987b7ed8714"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"de","page":"theme:taxfix/delivery/de","quote":"es wurde nichts ausgelassen","rating":5,"review_date":"2026-06-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.