Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Ein Stern Abzug da Songs einfach aus Playlisten verschwinden”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3096409536

Proof data

Record hash (SHA-256)

cb2cf238de031fc211ac7deaa6f58c7aede240ff842b44ecb2f0872a8b1c91d2

Signature (Ed25519, base64)

5ax38TSJnwCMMlRC63e2EE0pBNK+4G5ReAAzbvl+Fsf377lQ0EuDA4rPKuZ5Fmddqr+BomgoTc9D2KYlOR25AQ==

Merkle root

a249ea91ed6d494b0d321c9d53d89a7bb9616ff6f558eb56f9ac9b7e3eba088a

Merkle path

["cb2eedd9e6f1073c2d942f1874c11459a13b5ece8a4e05365d4365d0568eeb8c","d0cb51a2f0f5d4c64be452f6d757c3237754cb150703d7e489135ef3b68919fb","f034302ff58be463f6d64a48c24534e17614a48df35c843d55b9e3c66858e2c9","f4863de85b2b921e78864f23a4a043d6e8d06d108d543f66b2f6663cbc31d45d","68060f57a85e2f49f105da7dab0b09a7d695fd33d7ba8bfc211bb2d98407a995","596212a59f38dfe5b5f9c158166e782696c70c27ec76b478e9044d860ac1074e","53cb094ffc41083711b591e22822bf2911874d6ff09cb47935ee0a01778c3745","9adf6fc31715c66b79bd73f367f270f8666b0a8206d59bcb751c799c3e2bb3e0","bc4357cd79f03ec2eb4ddceac86dac3c0a974d8b4cc6d2bf18dccbb09c53f180","c70961c9b15dc1d5f1df4ecf987991f24a2aae79c6c50ca267b58239f63acb86","2a5ee83fb669abb8db4d6ae3376dfa0fc38362c95a3cd2ff7ce593f74e7db538","4d28ba43ea1c8abbf83f68db2659ac0105cb479803dd29f8458b1f5f13d38e0f","092f7437f02bcd2dcd15bd90af2155032a75e6a228dce60ad46ad73f833dcdcf","6f5950090de794fb9a8ae3a7ab60079331b76ac93dec1ecf10ae185636fd9411","c7ac6cb920cf1e460ae014f9f7e09e7fc4988adc232ef0b46ecc1420eaa09987"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3096409536 · entry 108e9186e8c5677ab1e1…

Expected log hash

f1740c5ce7036e4f36513fb4ccb4f6bf95b5dc879a1fb8a1f0778ef42370576f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791238940340","kind":"published-quote","locale":"de","page":"theme:spotify/durability/de","quote":"Ein Stern Abzug da Songs einfach aus Playlisten verschwinden","rating":3,"review_date":"2026-09-14","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a249ea91ed6d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.