Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“For me, the best solution so far”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3029042635

Proof data

Record hash (SHA-256)

eeeb26e4b5d0b4075a3b8e6f0b60d2df4c940f8c3bab646d8f3f1fe25cea3219

Signature (Ed25519, base64)

rk1stywKSY5fo9tnq20aeoadeqfPKOSXSC3NoD9v5G846296f5XjVA/5NMqvHEjiST8munxfQtzhlIcNQWO+Dw==

Merkle root

c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d

Merkle path

["eeed66e0946a3999dfa885bdf67ce1d89abd9920a5ba671fc930b8e292c8038e","e5c0630fac1f858f4dda61757d8a5b2ed2c35a4e29c10af1311fd1c036faaa1f","b0fc41f0775829178f9980efbd9626dbc4dc64031475dae505a205bb9853e731","eb572d6fd69b4a9a3d9602ab6a749e641677c6591d93c9652c5ea6e84941c82f","bcbcf5d7cd456c8c71d7dc743881071e8f977e50763fd49e2dba0bcc25f31625","124acf19f237d9af6ec2f0956e9a7a0792ccdddfd7469ae8c744f0a89c11321e","0ef7c9a55cadad00e710a6b478c3b2a719b2c123c09f909f4aca1410aae646cb","d22506ae4c71eec06f3c0b591f6d3695fb01cf7ce4c556a7ee269da663c7c55d","47a1e87e15891c8b8666726b34d7ea504fc8b916ae7a89053e89594c86056c23","cd845af1713217814d864e3b63a60e374fba5bb6cd18b0e3ccd85a3cc8eb790c","39cdc1aecb9b5a392e87c4a7f63769ba3398d97ffa698e1019e307550b1f8a0d","66a5f7d6068759996afdfa9d00f50f9020d047c19d8fc7cb242a00fe086d7aa4","eb0b801b65aa56775c6fb8c0dd57438657dd4883423e938d1c08ae311f20eae8","595afa49ab9420d8429afffaf39a6f4725518c7a8b9f2c89ac8a7ee0fc958fd0","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]

Anchored

2026-10-01

Public log entry

search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…

Expected log hash

38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790741815621","kind":"published-quote","locale":"en","page":"theme:lohnsteuer-kompakt/ordering/en","quote":"For me, the best solution so far","rating":4,"review_date":"2026-08-02","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1586330607?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.