Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“die App hat sich mehrmals aufgehangen”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
de591d1e89d58b2bdab101024087fb273d7c875604f11ed019ca1d55c0d0d3bc
Signature (Ed25519, base64)
KZ719yCnuhNnMTb60EwCcAeWeI2vM5h7ZH7P5m8cytuOmg6Ah+4RTMHSWLFf/ufjUNpDXKiTzpRlF4G4nhHJBQ==
Merkle root
a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c
Merkle path
["de56bf10869cceeb3aac79759697854b5cb557bd20f8c9f8163d2da1a8e5b1ae","2c5e28d1405d32e78f36faedcc196571cd1b92d03fa19f4928b185568f559a83","25944957f84206e23570bf8db8e373973206de823ba63faf4bf31401e3ae9a8a","0f0fb4ebaa6e256b3e4a145305b37d377eff6fa5ab5f3780de335e2f8b549d46","b32487e6e56b3fad9b8db2750cb5760f9b4497b7dc081cdd245fc60844eeee8d","f49f017b64022ebfa27e2e71d76cd342173e05fb2dc58da753049e3b55ffce4e","5ff0c990730fab9f7808883d30fa1ed016b14e39069188d8b5997ae9df6535a1","05a7108ca217d8144043476ab3d81985e9b229528bb4054db875563e6a7d009c","e86e63e219d620e6ff3d33b246f205e94ce781470dc1f2c3954faf7b4aa31b1b","7bda11dac180078d75e799e33500c895d8f16a2f446d8d9d164e37b37930f566","7614e321c1f756b8dae2ee1dce86a2a9e73fd362cb4368fb1cca4cedb92c1f0c","a4a97919c4175c0448825271c49799010a0d6acdd566eb4145c0a8dd4727efc2","e3dfd0ce13b4f18d9be466f664decf913e4c761baf693ad01a6280777721ad5e","96604383e0e3cd500d4560285508cbcc8eef5ad88e576fedea27dc38c3fc8ebd","142316fcc45d8fbb9a33df6e9be8f563650927c4e612ee96d4bcac9064ee60c4"]
Anchored
2026-09-18
Public log entry
search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…
Expected log hash
5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789619628558","kind":"published-quote","locale":"de","page":"theme:taxfix/quality/de","quote":"die App hat sich mehrmals aufgehangen","rating":4,"review_date":"2026-06-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.