Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Seit Jahren (!) wiederholen sich dieselben Bugs.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2907673729

Proof data

Record hash (SHA-256)

dfe4618c7d29c35be4c22b0b9ac1bef0833c036a0537830f769d7904ab149adc

Signature (Ed25519, base64)

Alc0TekQGva/RF1785ZrYpRlCSdYhPmGTvCwKrf2avUWlOk1L18LYl4NnioSLe8a2Dgod3Vy+exfn/l45lpaAw==

Merkle root

b9a08f9d6d76dd148110a496219c42cf3205c6f982800d84d5c85d77e9461e02

Merkle path

["dfe48c6fc04e4de1067846d0ad3e1e2ee682b5f0883e7d6cd34da20e9dfe27ac","5c15762eb7e4c672cba5539635cd7e503ca1b75b3301d735b2d853a2d0ddb23e","623874b41364cf75363df3e52746ac90a71fff9b9ffa7615d4ddca4b9a78ddc9","a7d88985f4383f38a4934744b7781ee1e536b6b59b5568b96cc5d17443ce11c2","99b797d3ab49e67cda86b87e4ed43f974dbf2a4e6482207a6ffc62b8efcf7cec","50da7cc33e961e2742a24c738d00e862bc3c49dffb3cb69edf152608db297fd8","680a887a964af84765bfd734c33e1a7215c59a321ac5286fb90daba567aff3e6","dcb29f0dad5ae7cdad0d802ef16d9e73c5319d2eb3e21a7fc3b37e7d0a712087","928604a4c46c5a7dda6d9261ed25696d0f4c3c3226c5c8417b7021ed3d488fa4","f18e99ba7a78a6b565d7d78fe31bfc86a3092ebcdf35bb1810c3397e6664a935","d724de4db852592012d7e350c865d36fd56f7f3bf918292f4d807bd4b562df22","2d0841904d905b327cb803816e73e56fa86447bd28a90f792c27c874ed9a6b9c","c975f4076f62a76765a4bc502e988829db65110a1650004b828d2dfb5f90a9da","f92a7fda99af63eb008476cac47b147880eec6868f847624f8b438c917195408","4543e8b9ac7bd077d9526acfdae449f0a0d5517cbb42414f50ef930ecdb9470b"]

Anchored

2026-09-22

Public log entry

search.sigstore.dev, log index 2907673729 · entry 108e9186e8c5677a06ea…

Expected log hash

bf9a74000249ba6e66b1e29aae9d8cb95c3400dc118569a80e5c0949f3e8ac62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789969984102","kind":"published-quote","locale":"de","page":"theme:v-zug/quality/de","quote":"Seit Jahren (!) wiederholen sich dieselben Bugs.","rating":1,"review_date":"2026-06-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vzug.home","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b9a08f9d6d76…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.