Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The gift card policy is pure customer exploitation.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
06a5c21a61d017d51d9ee1d0f644c78b8bbfb6031c9a99c9a3aee4e1f274dfc2
Signature (Ed25519, base64)
9c/1AXkwDakU7amdEgaGrvp5eA1vOeME7fgZA65f9bQ9wP9Hlo5u5A7A40yzqyMdHhuR/9JsXrlyMaBobghVDA==
Merkle root
c0f03d84ec6a08e9f47227502d608cb4b9559e04dbc44c0c60dd009e5498fd59
Merkle path
["06a81b2e363fea0574845ab801d88824fb1d55a1da57b0bc2e3b4de3672463c1","c474e2ead4022b0896fccc664c3794181f78d30cb446005d6039c4de30c6d7bd","a0ba7fb2aebb4870d07730e567cccdcaae26e01524b19698fbfb11db622f8a99","f52ece6b52a8334b97effedf7d17eab94e56cfcb8b49504701f77d7d8d8469ad","793ba9ee7b2f704b9ef2a9fdc880e7978007a0904c9c806f218219b2ae0215d0","9f0aa92e73076167ced2ee7e20519539946e211f2f71dc1e9a77d7ab1b8a2c72","e3707d5051b4c47dd03d88a9904cfca6283680fc8058285271f1b40b9c03716f","0cffb7839f2b324cde5e9139dfdde0ceadf5da7632eec0fa4fe25a1cff44c4ac","8a9322ba1f99f75ada81adc3553294c37bee574ee0647e059ef0e1eab2a82b8b","98634efaf3eaefa389526d57a08e1b1923aeaf98c9cb88ff9b3ab16e5ecbd8e8","afb0341739d6cce0e2ec3740342d49c9c355bc10c2c61f734a4e0fb601ac5f04","93dfcbfaa14eb9db410e98e1c9ab62587ec44d6ae69db495f0c4162138a42e24","1957d236cf53056b1ca60252c2186d847ebffccfd60d6d58be8dcd8b61e2e273","25ab3670878dfae1375e1b324da09476041ebe2bd7713b9236b40404f8afd0ba","a4d2a95b8c12efe70f0dc5df164839a5ef796b8ba35c8ba29774bce65792792e"]
Anchored
2026-08-17
Public log entry
search.sigstore.dev, log index 2495260497 · entry 108e9186e8c5677aab72…
Expected log hash
c37699e17d2ce6398bb526dc7ebc97861528e4e938842ba464fce3230eb047fe The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786937421185","kind":"published-quote","locale":"en","page":"theme:pixum/service/en","quote":"The gift card policy is pure customer exploitation.","rating":1,"review_date":"2025-12-01","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c0f03d84ec6a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.