Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super app genau das richtige um die Lohnsteuererklärung zu machen.”
Google Play · 5/5 · 2026-09-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3084008230

Proof data

Record hash (SHA-256): fddedca822fd2b46fc360051b6551c3201323336b05b3bfcea0c3afe7e2591c5
Signature (Ed25519, base64): 1BgauuQyKVlkdzjlSKQBnDYmRUA4bWCoATRh3ILcGQNVvegtfZHniwiPZYQv0UgI9rascyNRIxRZq40/G+Q0BA==
Merkle root: c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path: ["fddec0127fadfd4bc2859bccd87a8ec30044c07c4f59e6bd404faa4cf4ac5744","0e67983fffa209f8021313e2bee12945eb81fa8363bce3dc2a9786dc0115589a","87d6488e27c56d76fe599d5067bd1e8039db813fca86c02296a1176429d2eb29","7c7b2a9a3620405ed895e1f2577f26ba1e8e1d160cdd26fe0ed292c0ee339f2a","12f62ef84190561f7ffb59035bdd1b0c6436ff16f94c3e6b1c6ebf4bfe1059d4","c8afeba84719823973e4a07460b0f418d50523943ed642207a1236e9c639ef88","ba309a20a14a40fd229c6566762ee868b42273c896059a19ace50a6aa2c6e266","36b9965d2c6747a251e9fa50ae293d93a6803e6bd8f56ef22883562ef79d89b9","a22febf39d5b35a3d1335048c2c37c870455bb4cc3b14c97614b9208654ee31e","482335b0b26a3698b645b2549fcdb5c3dc901311cf0b9c1bdf25d08331dd4810","0f7ffa4e44ea54ee125a1db3c7ab06909d8312abd8c372823068316857a57f3f","29ce30f8da5c712d90a17b4b5cc4d06d33501710acef0703486a0d531ea0c297","421b69bf9aa58246ea2f121cf7b1422fb317cf6e2a73590cec7d6b46abbe0d0a","d08e876184fd6f67c869a98f4654f693085707c7f9c1884596981ce250200aaf"]
Anchored: 2026-10-05
Public log entry: search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash: 6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791183579482","kind":"published-quote","locale":"de","page":"brand:taxfix","quote":"Super app genau das richtige um die Lohnsteuererklärung zu machen.","rating":5,"review_date":"2026-09-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.taxfix","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.