Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Mache seit Jahren die Steuererklärung mit Taxfix”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2882354328

Proof data

Record hash (SHA-256)

c8d4ab3fc3befc8771259668c390c772b028ab6951f161be1a33a8599b4e9f52

Signature (Ed25519, base64)

gRVzNQ4S+QXTBbemXD77v3GvwBDwMxkH3wprOO/cvbyY/UiHCvs6c/GQtK1g1xmXxe0BmIEvrR2eTcDfAKcBBg==

Merkle root

a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c

Merkle path

["c8d403faf8d4bba98e1204913af21e58d7be27e26e1308c5c30416f5a823d9c7","cd5f97a692d2a359cbaaa57a6cf1bdaacaab633f47b446eb94a816d75f144aba","e7212530dc2f6eb08a2bf8c7046701edc6517f0e1c1145bc4e5ba041acc2592c","03856a6d3b956c8c44781ac89adfc3deda3bddb40448d9c2435d1f30c5733925","5729c88f44c668726a56692b2619d6a6fb4141c4e9e4f6258531aef6489baf93","4b6e6567883fb40ee17a3c65a6020a955868ce386fd502ddced16d2e30da9d5c","2d5e7346b9c5e229b5c7177a5e2dd1fb2e7326341ccecf69bda80759aae2bd0b","94d38647d545788689dda1da79da53c2073af5dd298fe85325033cdcc3af770e","9ef321f6544a9238bbec4ac39281d9651297b1da1c08c47d5e3600d5b490f363","ba73254c9e33e532c2fcc7ee5ec82551a179babb49da13ffaa1d40049996be53","c0ada24110e4d8c5b84abf418ee97bea83bc6a89ac44c0e9edeebf9f597a588c","045fdae5595379a07de7a8b75eccf2c9bc9ef267658155de694395cba89e6811","d11802523d6d1144d6f961b0db9dbcffb460682e8b89bd4df3a28683480b3702","96604383e0e3cd500d4560285508cbcc8eef5ad88e576fedea27dc38c3fc8ebd","142316fcc45d8fbb9a33df6e9be8f563650927c4e612ee96d4bcac9064ee60c4"]

Anchored

2026-09-18

Public log entry

search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…

Expected log hash

5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789619628558","kind":"published-quote","locale":"de","page":"theme:taxfix/quality/de","quote":"Mache seit Jahren die Steuererklärung mit Taxfix","rating":5,"review_date":"2026-09-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.