Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Spotify fügt zufällige Lieder hinzu und nennt es Empfehlungen.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d552cf601eecd9f609f325b8fadf32120f095bc8c604fee861b4e4d54bc350c1
Signature (Ed25519, base64)
7DkSLIa4um8S5BaAcC+U8Ud/y9qzOrdCmv+otlvgGd9NE2YhxR5ZBsx5qzy0Z/6MJjneXiUtI7oagvm4QjaHCg==
Merkle root
c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path
["d550f9eb6802a938785b44d400b9cb7576b88f6d35954a0285ab15e5d15d4b4b","1f99bd525d597ba7028fd95506e5ee869bec09643b3c695dfbd7aa71e8013b8f","95f967f0145eb230094fd72ffdc4f6438b18539a5ffc9968ebc5c4f83234e8d1","3684b2c0137983d1dfecb45aff51e4a7068dcc5e28fa1c959a9c2a483c8f902b","98540ea9b2a18c37f635d868e120317895d950ae0ee9db18ad9936c422fc3ffe","f645e76f6ca27d3494ad69413d64ec6c4cbd859a626762d421f8fdf53377da31","cc018ae31598d3abf23754eba4641f4cfe832a42d049068f8d453eab8798c912","c481673fb4f4ad32e3e7fa4ee1abb6044941089b2773344fe777055f054e1438","d3f0b8f3c6bc2d420d2ce0a1affefbfef1df052ac1a111ddf2d2431683af1c20","794075fc3d577427417a50cbf69f4329071d19f1bdfad27250a0b48375e27503","1af43af273399e3cbd99509349fa3782f03d5d53b686d63ffe8478dbbc40dcd4","af8f93a81e148289a79935b3272888d6150cef1aa75d2ebf64951355049dde17","784409ddab3be140dec350f237cb0e0185a25a3b72a80e8c9a65633caab6188e","7edfc85f9440fe7fef8e7edd6f1372271982f006f84b94693306aed78930ab32","ea816c3f8ecd74fdcdc9c068bf36a30dea5aa6d104e982532f9e8769ceaf3fff"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash
5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791348381030","kind":"published-quote","locale":"de","page":"theme:spotify/fit/de","quote":"Spotify fügt zufällige Lieder hinzu und nennt es Empfehlungen.","rating":1,"review_date":"2026-09-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.spotify.music","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.