Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Quality could be better”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
09b99419b2a3b0b6240e41305bc218bbb74f09c1222cf6c775ae4a79bf637804
Signature (Ed25519, base64)
8jkGU1UJ4XwbCJ80bQHEC1nQJiRrNLr+1puma7SlLwB8Bn1PPPtU+1hHZVb4aneCQmcQHz1ysqVBqFy+aTj4Cg==
Merkle root
b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path
["09b5bdfe24cb91b8cd5ac770a7f247463dc6167871914b1dd4615d9af4d0991b","03714f660116e162a7ad7af7fc456558def8e784fbc1d666a9a2202b7519d892","6b0d034729bbf09264987985eda36099bed7e606401a826cf04481fe5535a7e6","c64744e1557d2701851aa21e6dca9b962d79b06cf1be2fb2c75074d7dc885f6e","1a4e4ac5a67870194240a6dd327b84febcd51f1f42229df276c7e6bf6bb8d244","8c4475b5a39c0f9552c76a6a07a765ee409d531b4c1cae17759f8aacee0c5e15","280b3dcaa7e37e2be5422ab1396f25da84411b99fee4f53c32f75d9ad1279091","29c0a713e0637e8721fb4664e6dd09ee153ef1724325b1a7e5c5d3b0a0e27358","51f0ba43a03cfd780c2bbea3352d45e3efa2f156bb748cde975452df9bba1348","14dac0adddf323e69e9ef8f42d88b43ffae33c97a160ead0fdb242051d3da527","e78efaf320415120a8dba17ba0c988c4c27c8c4e3cad17a7d8db163cfe05a4bd","00658215e391bb39cb2a4470aa8304aac30f760b4b7065f3aee8dafd9f2579fa","a1ffb0ca27bb2bf54e7fd100f5c8de52d61a97b22e607de0b6963ed83cac9929","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash
687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787134378129","kind":"published-quote","locale":"en","page":"subtheme:cewe/quality/finish-workmanship/en","quote":"Quality could be better","rating":3,"review_date":"2026-06-04","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.