Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is really easy to use.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3029042635

Proof data

Record hash (SHA-256)

c31a25ce5eb0ec0e13c8c3a510de3f81f1c01dbebc075697d0deb89a06d59b0f

Signature (Ed25519, base64)

iaz6JF93dvG6ZjKSTHl0nBL7KeOl2AzcHKbPf9n130624jgeX3iSUIAjeekTkco4iD5vSWUatPx65ziD6uqxBg==

Merkle root

c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d

Merkle path

["c31de412d4d8bd54c61758a0be1efee3d0838d524c8439adb829b340516bbfe3","1535352f992b5423cb7b118bc8511ab6dbd4bb018127e11e65095dbec9eaf070","aa217146a49e7ae9b9c24d1aa233e998319ff49cd3bdb901572c2ffcebeb87ff","702b58eeaffa309a39b84870c8fe8987ca32720e4d145183b8875d032efe5c4b","2c9501967871313aaf9b9403903e30cb6513d10ce02374f87469c1192f58ca85","93956795fb58a5992b2084b5a743c3bfa28176e71d0c204fa78acc872fbb6d83","07677bae41129e6826d2d589eafaedb2202b7ee8ebdf0c356876f1c8f935b8b3","ae3a8614e8815c9e8da851288c35361b98eb3771e913d6b24bf7b1ecc07bf544","f0427e5b44e2cdae52dc2eb40e2e60e087437ceab52627535c8d05fe6438645d","da4491ab1405f3bb7250589b54fe36c6e524771059d6a810c93010ce6b9a0bd8","3351a536c7f48173146e5c3371000b4ed64f4ac34786c8f03cb04f2a9153c9b4","a053a1075cbdeb4806ef4345aac27ccb08b07f974dcab0d7af22da301fda4f00","8d810c8f9c62441734c87c36156dcad8983bbe1dc90b3b2854fb49cc7a54d2bd","1616c16ecfa49e18821de7767bf3fa1e1a6fd3ec2fa090ad2f10f8770da252c6","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]

Anchored

2026-10-01

Public log entry

search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…

Expected log hash

38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790741815621","kind":"published-quote","locale":"en","page":"theme:lohnsteuer-kompakt/quality/en","quote":"The app is really easy to use.","rating":5,"review_date":"2026-07-04","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.