Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The chosen cover looked more colorful on screen than it actually is.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0a7938bd74323992f0fb7992ebe88c232e6cb9449409f12f9fdefc7dd82052d7
Signature (Ed25519, base64)
4BwD61G5pVOj2f0dkX5BqLTp/tOjMFb2auDvajd3zBGrXDlD4B/58MIZIWvMErbsNkYV6/LhG2qNhV6uuY+wCg==
Merkle root
568de27ef784d24fced1ff6a77db7dd17bf4275bd5784f7795efbde800264945
Merkle path
["0a7c7a48f7e93e17cb8dc6b8bb1e142014b8a968e071a2f8bc7f97e4e30ae8bf","5616ffffdc6a43e87363c5b93282182ce2c5bdc0b3d560bbe837b81ab0fe7728","74fc04a2607736b3aa6469d46d22434c9f03ea27fd39cc05131d5041158f4732","eb67d4c6d44316f80b154c9833bdcd588f20d0d99cb489d870522bb3a44a30cd","3f3025a6395f8e08c30ed80bb34aecd6953165b4d9f5988aa245c409be47f736","429d6365db2025af64c731767aa00350078d724ac87f8fe8817ec1127d773d63","624f01c6a648464cf6fd012912ea1298cf022d5414fbdd2cf3732c1e2389bada","21817864bcd15cd9962c79d64f314bb7759e75ce8eca37d11e86d9603e182e9e","92f22180e0cb2bfcf01ad673a05165507f4c34cdb3e7016c94db48c0f7d47a27","86d77ccd78be7ad39d425fef021892cdf31a02c84d1af109a710bc0aec50da79","901306f7c89d1458dace38a44733df0079e9f6bcd2d43da3c0160df51eac2c33","e0a30bae2c840156322dae52a02b08e3566a5cd586b033b2074977fe1c676705","b00deb9332470bdcb2bedfb8410150cfab1cc2f7a3ba959be220a4ee71e29732","3940a42145b26dbcc3a80df28cfd69a39fb071ca190610add4dbece01cccc9c7","b986cf6ce32ac8a848b3f8f187759eaad7c0ad1b455850f1924427e953c31abe"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582597535 · entry 108e9186e8c5677a8508…
Expected log hash
20488e7687dc1a73ce99efebf3d47aaaffeefc76737db7dc492f239bf4ef26dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787625364142","kind":"published-quote","locale":"en","page":"theme:cewe/material/en","quote":"The chosen cover looked more colorful on screen than it actually is.","rating":4,"review_date":"2026-07-20","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (568de27ef784…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.