Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“perfectly gift-wrapped”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1402cc6c2e417cf37ad618924e9b7fce40b9d6da907036414c613525e9fbae9e
Signature (Ed25519, base64)
0/GTyDNDy51XpFxtHeOBz9nhx3T31mQVbFD7i3FjRwRHt0HJ6F4zJMJI+UpyjlociFTtnOxXMN5XTgPcLsFHCw==
Merkle root
568de27ef784d24fced1ff6a77db7dd17bf4275bd5784f7795efbde800264945
Merkle path
["14031800f17ee42e7463e2dfaa1dc745bee5b35fc19afdb8ee6fb75e3a9ef2cd","8c5fbedc0c8086508df3e816f6fd580797e0cbd5efc9a79a15f9863e27a75d8e","895057e3790b7dbce40bc95c0571d2211b2aacbe4b5e270477d9d3d1ed2d760c","175eaa145d8e79f62464b07b3586201e9647fd49aa05a201b9a34aa26916e78e","62e9e3ffd4183fe8d9395b8b97fdaabf818c7856353112595ffa4202dd78bece","b0a874427360fa5784834e88d2db9d24606e529906bcd5c55365bdb31df153bb","beaa33afaccdfcd12f227c08bef842f6c10951423cb52b86ef1e11037e5cc634","7693c62081813ace1b7833d85d3bf35f5e600b12f38aafa643c6ffa319e38505","c620dd7f175cc39ca501f2805d2d5c672af230e570cc7356e9075ff2ed815b4c","d1687d39bef01d047ac0b7930bcef1e03daf1d40d95931b775cdac338743dbe0","0e3b62424ea4f3138076bd50d1890a5a44b61ffc0a34bd4cb87c6767ca82fde2","e0a30bae2c840156322dae52a02b08e3566a5cd586b033b2074977fe1c676705","b00deb9332470bdcb2bedfb8410150cfab1cc2f7a3ba959be220a4ee71e29732","3940a42145b26dbcc3a80df28cfd69a39fb071ca190610add4dbece01cccc9c7","b986cf6ce32ac8a848b3f8f187759eaad7c0ad1b455850f1924427e953c31abe"]
Anchored
2026-08-25
Public log entry
search.sigstore.dev, log index 2582597535 · entry 108e9186e8c5677a8508…
Expected log hash
20488e7687dc1a73ce99efebf3d47aaaffeefc76737db7dc492f239bf4ef26dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787625364142","kind":"published-quote","locale":"en","page":"theme:cewe/packaging/en","quote":"perfectly gift-wrapped","rating":5,"review_date":"2026-08-02","source":"Trusted Shops","source_url":"https://www.trustedshops.de/bewertung/info_XE3D21EA81A56276ACEED1C9AFB85F941.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (568de27ef784…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.