Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Meine Steuererklärung wurde von Ihnen nicht korrekt erstellt.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2882354328

Proof data

Record hash (SHA-256)

ea13ea00230b5ac37c9ace9cd2cff79fca35219b985f8ae535ffea229b757bc8

Signature (Ed25519, base64)

Rlr/ZfkKCgbIC149YZsnGZfb6bEGxgzkMjcingfAVcQ2oUoRJ4wyOfJXDn9CV2bmbrpj7PNvkK1J30jXDIl1Bg==

Merkle root

a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c

Merkle path

["ea146f017f3f575f95bff2a6f26f2ca1a2a63be0ae0f665f329258f2bc0aae35","07c86f3f0cd4ff6b52f9ffabc5be08f97874d4dd3eb7765ace58fa83b576fd7c","2ae2a4951717b2c38fa6ecb4490b5b44c1c7dab9d29da7b3753aee589a066222","441405d7090d2084cde578c35fcbbcd0c28348e61d8517674a0c1f48a69e08f1","32ed1461f8e3d273bf19f49b1baec459953cfe0592a01aaeb2fa0d58320b7e88","1ec010341ce6f8790dff56042cc7f414f8a38ced2e6044958d6fbdf10a333f1c","dbd3c17dbf4252684caf89728c99fee2d0237d4175c4f5151991b67900ff4938","364bfa4b982fdace1249be45257672dcbf328c31e6a31a9083e4ca976418e484","f1ac4dae2eb87bfee99d6a38e53f0e4f8d4a9884badf563ac95de1be020649f6","a46cf61a0c433ba41a8352281f75e4081ae57b2bfaf7775fa2ca611fdf7c4b1e","29ddf35eda21d3648a7dfc61ff7425dfe99da396b2e6b22da2657bf820b21625","a4a97919c4175c0448825271c49799010a0d6acdd566eb4145c0a8dd4727efc2","e3dfd0ce13b4f18d9be466f664decf913e4c761baf693ad01a6280777721ad5e","96604383e0e3cd500d4560285508cbcc8eef5ad88e576fedea27dc38c3fc8ebd","142316fcc45d8fbb9a33df6e9be8f563650927c4e612ee96d4bcac9064ee60c4"]

Anchored

2026-09-18

Public log entry

search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…

Expected log hash

5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789619628558","kind":"published-quote","locale":"de","page":"theme:taxfix/quality/de","quote":"Meine Steuererklärung wurde von Ihnen nicht korrekt erstellt.","rating":1,"review_date":"2026-08-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.