Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“But it worked out”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0517fc3c48085714eaca2e03f143c5afde8c300658de77770f750d9635625c4e
Signature (Ed25519, base64)
p5AvXbz/E9jxQyIPbNguC62q+9KX2yAqwl8tGjPT69491O3HUch0qmjH7rjQIk8n639H8af4uEInlejKYKNIBw==
Merkle root
7af90f1f77475369ba79c6de04e2b96410d172ee274478b168f1a4f09d59cf0a
Merkle path
["051556fb2ee20afd8bd56e79a34c491315b8796924ff132b496ec12239c5c088","d4b336a6843a9ee6ea95899428806937cbd9f2d871775934933e812190c1e7b0","a3c88316f545734b825ff984bce5eaf32b0498afd2e0e6a167e4bb375278b56a","1ebab643ddd63ce2c45a71864a1e2f0c48f08257eff468789e90e21897213eaa","bbdc8826c8d3a255a611652bd87e84b70db36439e41fb70a87a8e9f871ebdb57","e188f00a51fcf9607905103c2e10fea353afa54bd4b17e54890e7fd87958d6b2","411a4163d3c6efaa896f1573e83ddd4d28df6d7ec5b40572e7d504b2a34ac839","c6e2e809c696ef48cd4fb05dbe056f11ca677e050ab80db53f01ea7cd41d2269","76bd199cf31d61fe7e2813222af4a6c0cd5ab3be536c89250882fd9f5256232c","e9b586b39fbc9608a6bd2b0de8dfbaacbc28624d5137c1b13da7f955ce6c4b97","f178a6ba8af3faafcf5086acb628984e2d9d15170382196baa7f3d729a9b5954","cd317d1649e0bf58d681935e8e6f1141a5adb633ef6f6b322f1066f04e04b19f","7bc35fc0b1ac5e00a1fac8e18f18c60265fead1085e85ee607cd9a0bc565efb6","8d579e642eab71e9d60e8b7671af998b44e10d0e640b4db5ad57a1bf7f65fdb8","afa871c197d2bb2eb51f71afd159f7ec4121066866dcecb4444e5695267b9e03"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657999633 · entry 108e9186e8c5677a0b7e…
Expected log hash
0cff664c54333cfb7f43cecbc2192b6f4608e129f59e5098ef757ce353383fa6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788148761434","kind":"published-quote","locale":"en","page":"theme:ifolor/ordering/en","quote":"But it worked out","rating":3,"review_date":"2026-08-09","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X309A43086E7145E358EE1687E9DF7162.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7af90f1f7747…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.