Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“That worked out well.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
07519a34befb36a123ae765960d0fcc15a144d93fb17997ab4f93bb6cf51ea1c
Signature (Ed25519, base64)
4dyhBP3ORjniSrILfVJAFwJTxCrrurv8rY7R991YAyfdDdQge7cCWq610H0B6J++nzYHrPikOzFgib0YbCxhDg==
Merkle root
d414e521fef9d6d099989fa0d693684c20b42a89a12033fe1adae5ceadc28160
Merkle path
["074d4582a229419b31b5db3ce964aa6b3a8ea3e29501c8c9f47ab4bf4cad2a31","ae37bc92b49ce0f2d816c0633fc236f38b48ed7597e9555353df70a0612f0fd0","1cc21566771a0e27ca946e4355192123fcee587264d6c0c27842f7f1b9b4a664","857df475550b42afaa77d7b58cec92277928a9ab408c213ef193761b2506edec","1c1613e8e60ec1519d136f47ee0463e34b6fcaf414ca48f0ff3be38b0b455640","fd750569d045b8a65b21e1c8ff878dda2b2e29b69dbfe552916232e61e51cee5","5d4c2e9731279f0cc47d39eab761cd1581aac3da35f9034bdc2f132988f6f59c","1c56439ab92064e62369f42ac62718f018e894df9415641e152a71e8f2b6105c","796e2c89b95ad6e634637d8fa001ddbefd2916459df4921acc032faece01d770","389245764703bb8694756924d2296cd6e1198bc1dc374c17fb3186520e511500","713e2470ca565502037bfa6fe266ee97cdbfa1a52a7fbcbd3e73fa59f3ecf10d","8fae7514a4924bfe0cf5e60743f69291a922a54a6ba19c537fba85dd4397db12","f77efd58ae82cd437163ba9ab021e9fb524c058feb0d1f3bc5d429c056be2720","dd85a03194c1b09d93a4be119d3146825d20c9e375d143636eff256904ff3e25","d9bed3bb20fbc734967be09c1cd24ec9d5bb72fd1e4fdf84e6057ce858f8bc78"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2594412582 · entry 108e9186e8c5677aea33…
Expected log hash
b1897d255cf944fc063c3044a4546ab02c40327197d891ce843dc1c45c2dff03 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787713855428","kind":"published-quote","locale":"en","page":"theme:cewe/ordering/en","quote":"That worked out well.","rating":4,"review_date":"2026-07-31","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d414e521fef9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.