Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Der hat nix weitergeleitet oder sonst wie kommuniziert.”
Google Play · 1/5 · 2026-07-15

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2882354328

Proof data

Record hash (SHA-256): f9a0b784ab37fb7b11446dcf39b62af1115df7af5794522195ec2eea23e49025
Signature (Ed25519, base64): KxcglL2egJsj12zqb7zYhCp/zXSimQqKbG8l2F6ZeJ5xgSdwmiVHzO/iVFBDhxzVOguL7Z95gj3UQpl3ik9wAQ==
Merkle root: a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c
Merkle path: ["f9a08acab5d39c9ce84cb9f15b5b939effe364e736c5eaa59b63d99733f90d83","14b978332a82d7b11222e036e903ec9c3f57c6191aa255a554a537002f89e86b","1cbcb5a65d3a0961075fb870fd49ae5cb910e4248caa2e320e6f9f54b1063732","861508eea426353358812d33cec37947bdddc65c2dbb304bb83bb6a8d18621db","174ae897d55377001c268a39a657bb6a98c515cff5b04d4873141aa1f4d35846","5999fd671f2066c9e276aa112e3c8c9f9f937baa98889eb16f99cd48968eb4e6","d645a5bdbf0a8c3400a2f2858c87c17150f56bb82dc671b885e55fa6ab211d2d","ad7bc29994d9d8f3a0f0d6b5be27783d42904efc2e0b6acb688f5f62c304ed7a","74b34afc89eda9465692398c0d96e502515a1f2b4f5e6e7e5ca0f889bfb94516","bcb28a35d514ae9fad33466097e42c3de0290929e70817a2659bc065c3970d0a","78f97885e13d30edabfcf991eee61e6cbf4dec594bc33512836dd7389e26c48d","1fc33f42dc35de199363a0769df48782d994933f89f7e5730f05c9bd390125f6","142316fcc45d8fbb9a33df6e9be8f563650927c4e612ee96d4bcac9064ee60c4"]
Anchored: 2026-09-18
Public log entry: search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…
Expected log hash: 5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1789619628558","kind":"published-quote","locale":"de","page":"theme:taxfix/communication/de","quote":"Der hat nix weitergeleitet oder sonst wie kommuniziert.","rating":1,"review_date":"2026-07-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.