Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Heute, also jetzt gerade, funktioniert es.”
Google Play · 5/5 · 2026-09-19

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3124493015

Proof data

Record hash (SHA-256): d3881c3a30f36e5117f3d7dbe8ab02f3e3cea1c98c1f43d1586e15d0d406cca0
Signature (Ed25519, base64): +8CnvKlXFw4t/E89u4ggLj5pVeolw1/azaRKkcud3e0jMTxP3Zlj0R27w9xNAymJTaDsrlzMeU20gMx0Yx43AQ==
Merkle root: c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22
Merkle path: ["d385f392c9c4eea7dbd0067954d8363f6f0b32644fa1cae798af69dbfe790c4f","b6af7f6581fdb2b1b09a5f8653fa4be6f99f5f943bc5e3b6c4524420506695cd","1c2d05501d15375db6dd26fb359fda179b4e5f3edc01161d43af3b66c0086220","93a802a890747a472c07ff5188f64080534efe692880822a760b404e1e2ba382","308534448e8cf6cba641a4db6ed9963880147fa1da6ed6df625265567c58a31c","7842cf42414ad580e4ec9f69e90640fc9152f8bfff5f054fd4c27da814f7dba7","2450a8c8fd55d2a494ed160c1ce20c848f1106737a09b03644949c2b38424777","84314557e140a6e22077e07155c3e609ffb65708d3279067a872afed492bd15c","6450c1c4e75906777c3309776f7dfb99f3c7ae0def2fb67d11e548f2ddd7ec59","1a6c75f9fd687611cb7f4c522f2182b890e40995d84833bb605dadc82b3286fb","7ebeefa0a1dc52445193e25d5ed17c68eb0a7dbf166b8de834b1e0c8ab5a6077","2f64f7768c0c5f10c470488c785944e2b2a27349d3232c2325a30cbc8d810e1a","3220c8ee4aa60fe021e29555ae2bed0850a1f142c0c3a97b7e1dd7731dbdd32b","94807f81d1501aa004c640d69440b9636cee1d43c6f07fbf281372be591c6480","dac1c339b376d49b10e240bfb32d2ada460f1b51d5428b7290189b662873c331"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…
Expected log hash: 0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791350987184","kind":"published-quote","locale":"de","page":"theme:spotify/durability/de","quote":"Heute, also jetzt gerade, funktioniert es.","rating":5,"review_date":"2026-09-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.