Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Lexware weigert sich, alle Information zu erfassen, die für meine Lohnabrechnung notwendig sind.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3083528439

Proof data

Record hash (SHA-256)

c581fd1f542f5750e68587188462d67465bd326efbf3734c0821afb36ed75cff

Signature (Ed25519, base64)

ZlYFt5S/9e+u/50wugNd/eIAyL2u+STlvCASRXuVKbgKNxamnkhLKA8WUZS590s/bQAGEwsp6Uo61yIETxs7Cg==

Merkle root

3ac2a65164a98b25d6607e9cd20ce9559bf4391886ca2eae943b9792fcb8a323

Merkle path

["c5837ed61ba8f6df26781355dacf2be96189c86ba059841d84402572f454d1ca","3dbcc2ae428f6e800e09ede349fe1fc65fc3482d14ed67768c3ec14e7719033a","062cfb839b3105c689a38c6cc875a4beb90265e51e1d098c56fbdfe7b0a61f8d","c1298b469bfaa86bca7f464950f79c985fcc3bb36530bf4716d7f00fab0c5c1e","2179dcefbcd06dda8cd13c893a8232d533e1a008dbb2d89eb20ba5bf9e9ec065","cf1566d661d56f17b57a1be4f75fd765cd939ea2313ce3ff97fc10e2a9a1d521","d840dfa6aa4c49a5dddb539c4e9fa9915d9cbf15e05151b8e05faa8b64525df1","3646cce59cffbc1a7ca4501a0adc3e47acff44909904cd1fd124791ed94c7642","f3532fee83bfc6b3aee5df61f8d835a5d243bc78e7438f8dbc06d105e42d036f","0fa2c6001885e58d36e64c4fe648e30c6d6e0cd36d7a6b153412bbaf053be744","dffc5c3722bf98f88ef7501c9573b52baf00fb547394decef5fb86f6bf6b1635","d6e27fa14e2a7687d1152bf8e549b3d88d4c265d880c71c4142620d6fd7926b9","9bda89afb801a1d22cd8905589cd5237ad4f295b6954329d6c8a92352a1f2d04","582f0970476bda674580f5a1da0cf4286664f79c3451840f238219e2e601200f","f188a7ba649f7db7610333505ec2abb71ba1da1ea59f53190cb32e51e57ac1c2"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3083528439 · entry 108e9186e8c5677ac4c0…

Expected log hash

8816bf48c9e6a0b1ef2758b04fc7021824819cb4cee30b879cd603a10d38b8a0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791181418024","kind":"published-quote","locale":"de","page":"theme:lexoffice/quality/de","quote":"Lexware weigert sich, alle Information zu erfassen, die für meine Lohnabrechnung notwendig sind.","rating":1,"review_date":"2026-07-18","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a5b28e917d4369b0329249c","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3ac2a65164a9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.