Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Sehr träge Programmreaktionen.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c555a79a46d68a81b1a7caa6b61b78f510a6546300daa5318e74b0ec710d6d39
Signature (Ed25519, base64)
vjAHCMAIa6ETFuuYTSLFcdeqMTfYJIdqoTNAEDq/puk9TdVDfLKDjRcBXdhHzvmCW69RxU/4lkfrbuNs79HnAA==
Merkle root
c5671f9a997da9b293a79ebe58b20e4534ae608121169f15a5adc358d42ed147
Merkle path
["c5557c8aa8f4a8974942f1f13beda8f9fc4a77ac511035645e731e1e244457ac","94a44581388260cf44698570f78fbc483fa0c751b75c1397ded6992ede47c398","b07a122700a35a77490dda40f7c8753642216f0381799e9de0459aa0824d43e3","3557f99437366ef5f265dc03ca223be1c13af734b55474ca22d35e8a6e41ade4","53302acfbfcf9c117b4e51cdbfdb8b334527a9c42fe1c7c4d80ca775a1ed20ca","99a77394aa914b78fa2ebd0cce537edc61c4ba4f3bcd4b8589e39e4a05b0e2ed","d3308be3a507db7d753f14e7460632712abe2e10a4dc94d0c183e1b3c0b70d9d","e6cbd7a50f7b8b3ae0c90a2c7d7a25a366428da01dfaad79c2ad087080b07e1f","fa444645d95460cd2b35a5ca771ab15e039b6a79dbe283f86b3f9eabdfccd4b0","9d339f7e2d09a793a4ba71a37e61a5eb381324a02e87862eafb545b455c7d65c","4cdc8f0ffcedd80f37999351976d392fb7b87843cf28dee99942963f228d1695","a4e64ef32282e4add189c71e21dacdaf908266188def63a11aade425c33068c2","388888fccda291caa041510ab350a71f4e5bb952b0c83f6d43c5ee2881af2c2a","8621becbd314bf961e51e6037fd253dfa12e66cb7b2d1c68d51addc52321e8a9","b178a1b83338c84f1a44bf8fe330ca4b62fad9df75daa4f4e38c0d04e336f831"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3081733041 · entry 108e9186e8c5677a0bbb…
Expected log hash
88ab7ac46d4614551fa6e665889f054d7592b15d91016a45621b5c46a7ae8e2f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791174108170","kind":"published-quote","locale":"de","page":"theme:spotify/fit/de","quote":"Sehr träge Programmreaktionen.","rating":2,"review_date":"2026-09-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c5671f9a997d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.