Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Überschaubar und funktioniert gut”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ffc1f269a0db75fd47bc6ce9a1447293c38b357a2034c514aeca38d190109147
Signature (Ed25519, base64)
2wSQCVG171nYOMA3octWJUW2knx+a8x+qS4JuYq3Rd6qRV9R/zilQo9bNTbM9r8mOlxGjFFQPhiB7p7mRlX/Bg==
Merkle root
80de158564b7616572ca0c0059561f6ec90cd5bce49a388e61df989f3f6f2a86
Merkle path
["ffc545317c930961156b7946415c4966406a95919477b412ceed9c05ffbe899a","4a8eddfd6b1fe30aa96850560c62d174438387e4f19e2505995d1f84de30cf08","71dbfe584a094ef94a328c80825fed79a5eeeb0502bd4f460b3f03741195d41d","4cc146de9a73f9669ee3d108f997d0afcd9cfd0786c3b9f2326d72e946f212bb","0d0b623fce615e4f6ad34366fa91eeaad31a19eff8769178c7422f9f128529d0","82f148ff486b6bb8070584548157fb3d72e77ae685f823c7c886c742566e09e0","a178135b2b7c04419ea4971fbdaebcaeb44f40b67ba50ccc8515d580e63b73b0","ea8ea0636209e894d42a2721c761b17b236d4732de5d8a61fbc40fe6febdd65e","7dce70284764eeb79c91b9d9897b62a39b191c5d0bad82b18667d2d644a028f3","3313dd0f5efca87d347f162963e654f8f97b434abd08d651e0c6d5a5221a45dd","a005037a25946b6652855fc44de7f4032ae34c31430074646af4b1ad906e77ec"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2513802575 · entry 108e9186e8c5677a9216…
Expected log hash
5899b5d0ea18fa3c879147333708054c2e3cd77662f2b6f633aa3b5d5512bbe5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787121142818","kind":"published-quote","locale":"de","page":"brand:personio","quote":"Überschaubar und funktioniert gut","rating":5,"review_date":"2026-08-05","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id1470197212?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80de158564b7…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.