Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Die Einrichtung der App hat problemlos funktioniert.”
Google Play · 4/5 · 2026-06-21

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256): f8433230800f1f8b93e76d8b0df9e48658ca428370582ab9d02007aaa608038c
Signature (Ed25519, base64): X2vBWDqKH6dfftCHnU+geLF9YPDSKaxt3MNYUKAmqwGFP+ZYCZlbR/C6FQrLxV99yUhMhD1FXqIQtV4DA5BpDg==
Merkle root: 13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725
Merkle path: ["f8481103a7068daee562ac1844417cab02013a3193f514df151a3ab71354e38a","1244a97a7c59abb8d8c6c7fb14c981acf8b434559798b4553562ca0e753a63d9","6185bc9036ea9d5a4183f67c3bc44c65eaf48a7278c7a1efdf2bcfae7091770c","4d4d380efa367000295c2e3636f9a6c3f7fad5b4e28f3e38967289ae1c2b319d","5bd312583e1280f2702874157f037c31b45b49bb3fbdf7ce5a0e2377dab885d7","38a60027b9233ef8964739c2bc551bfa9cbad2333db5d803451eaf6fcaee78ea","2d2dcba7c491a3aab274bda829d3ebefa7f843ee589f486b11597c05646e54e5","68072346a73b8cb7d625a1690eb2f19c2fa5bc7994607ecc98d66dcce2966394","08504a9bbc9e544e286fd5563271327127b8396a99106a57c3cee9668182f0ed","96601ad76b1dc54bc0f6ad32a04b43fa5fac234a85a8f50a60f97986ade89b06","69d18b1d5b464a04618121db55257290835743f5c8bbac0978302b1ce0fc4a67","8aff7e87e9ed1f4a1fac9ffd55d4d3a5c941cd6255d5bd7b04e631234e2516c0"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…
Expected log hash: 44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787279544668","kind":"published-quote","locale":"de","page":"brand:swatch","quote":"Die Einrichtung der App hat problemlos funktioniert.","rating":4,"review_date":"2026-06-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.wearonize.swatchpay","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.