Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The development quality is very good.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1182975d830f89d99fc43b8e3278a69edbe6449c599f34a400b171a75d78e091
Signature (Ed25519, base64)
hGaSQxt2e1t4rllJ/r/O7C1+la2jAuieN6cEUrLBxCBsKsYE5qL8aMrvZDl0g9xRtxos4BbtJK8BBvEuaIV0CA==
Merkle root
11760913b24394c3efea903b5693403de67f30c73517589265e62147ce6d7db9
Merkle path
["1182f0ae6cedbf03e70b047a992f00ce4f6c625e36937e49145b6c0d3ff727b2","7b80b54a6bb006dd5cbfc051344c9aaefecbf60001fb926f62b5d816a098073d","9cdccd295b6a7a019e1030c3e522b45a0d3d15cd875d01b76019b8ad419ba36a","4d10d0efd0f499f2ee6f091af6b43df3c861d1779e04e7b8ff0ce48b10395ad1","42b8f2145fcbc1a8c6898cdd959ded4d62b22383e95772fee413e97d03675ac1","2c56ee11f5f84209ecb44186aae5b3ac1c7cc36715c83ab1b812bf75e327c46c","ae5d9b7da6b0c41f5a7c377f4a0b40df95f8d6f380ca2adce8dfe7321dd7c03e","451678cb5779d202a8f05ad24b55c5e64bd7a4aec98e610d6e6e42d40ed5e31c","1bae7252ef283b103b8d5622b99bf3507fb02726d3ae6b3f6404a7e6dfcb21df","f09bc3c3ad670fc91c35d1c72ec29511b7ae94a366743d99b706a9d9816d9eea","bd07487b691762e95594ec81baf11cee57d318acb845571e5b299701c18b29d1","4e02c6a47369138d0eacb837d8bed87707d8edf6573bf9a07b0288ec7a1a3832","bd8f0b0faf9d3ad7c16d60f7a01c003de274172458ab1f670d78e9cc1dffd585","4d94d9a9168f14be08d81b3238e6d7999acaf99b1233bada5f6c2802401f1b45","8cba8822ab29049afd67fa646ac9379523fc6be8932688ce4f3067f563511db4"]
Anchored
2026-08-27
Public log entry
search.sigstore.dev, log index 2612584084 · entry 108e9186e8c5677ac6bf…
Expected log hash
0a57a1a3ef828bcabfde2971260e46ab649b0f8c2c96e231d49bb83e51a8ab3d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787801559681","kind":"published-quote","locale":"en","page":"brand:pixum","quote":"The development quality is very good.","rating":5,"review_date":"2025-12-14","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (11760913b243…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.