Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Everything is explained very clearly.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
b02fa03bbbc33c88586fdbbc33ed22e75792bbe695b693839b82f445d6ae602c
Signature (Ed25519, base64)
3zlZgCMGjOMYnxsuEhCFMk0jHUxM5H23bV3iGQBwlYBwdPnJnk8ab5M2Vh3wWBKeQlRPusM4GpPNd/OiLLdoAQ==
Merkle root
c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22
Merkle path
["b031ee199fb04fa2aa609f59b9dd2ec8b8831f169445f259ca88b72b2ccf093a","1e24de90f6f4fd770785eba4fa5c1ab6b2e8e36bd452d6ed0a7c00962437891d","85ef109e6d5b3573ac8288937e141d2a1290190a272e1355c3da17aecae38c1b","df5e9f0a53c3919f5ca3dff495ee24271d9a070280609b8bba63923fc542277b","991807c74ee66ce5191c39d07550dac83180281e10dee4d6d728e73981290221","6b4241f13f6c6650b821cff30a4580887f1ae8e67d3eaee44f81ec9dfc119b86","da3260ff63f015f67b8db395d7dfdff3d5a7100e8e86a5cb61f719d025e56482","d782610cf508cde70c843b019ec74117c95284a7b0f44d8e937443c4d0e683e6","fb8f183de5c25ba7bd7a052e3c3d78f8a0ac9c10d3f4b8c1acfa47caacc7a948","8d752fea3ae44fa2e1433b9bf3bbe4313fb1cf584f020197bcd91400f68b1e1c","de041bdb7fcc0b0d8c16b08700ba9928b5f1eb6f941ae91d91270bfd6fb81fd1","1d91e7f09e0eee7df9b0495492d1288506be9c0a875c70e754657bc2922d56a5","0ca0aee478fa1ba69bb70f4260cb46f18cf0d6f39723c3088eef45091c048f53","94807f81d1501aa004c640d69440b9636cee1d43c6f07fbf281372be591c6480","dac1c339b376d49b10e240bfb32d2ada460f1b51d5428b7290189b662873c331"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…
Expected log hash
0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791350987184","kind":"published-quote","locale":"en","page":"brand:lohnsteuer-kompakt","quote":"Everything is explained very clearly.","rating":5,"review_date":"2026-02-21","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.