Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The only thing I would change is having a box with a lid for easy removal.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
182cb10f8fcccc90c86428adb5b5d411e2c2183c7441f7d35de778dbf8f1bb33
Signature (Ed25519, base64)
oTsMZky5Mvr8Zzocx0Opl0f36U6FdU58WBJnl0tqDjzUBEiREJsLAeeeBxcuJ/4+qnISYBSqiZB3GFHyaYDoDA==
Merkle root
f0f62c56ff0378d82fdd48082f920661828d39b95ccd5c38fdfe4483f1ee2ee3
Merkle path
["182d63a55efab9bb368d967ca11e0a1cb62eb2192940e23f209dd5b1aa040050","0fd8db6f6ba6b39e8edb42c6ba20fb90bf4d7b27271a3e7ec81df336f04a5a6e","b6a3076e1b6aef8da78818cfa6f6c312da5dd36f28055848dfdb73bec3625ae1","3df262e074cffb5878c4a6136ab8bc8ca07acbfbc5f52f982ae88277bbea5c4f","02e53f87da9d9999bd22fa66cfb7cb65c7980d37927d8e4335c35ad04c2dc9ea","a8c20d7be94681d69c07c92ac28da881a1297a40c6cfe4f4b5557057d5118eb0","4798aee3ae5739525d772d4bdceec1ab55f7cc36aae8226bf24998006cf5372d","f6c3847555e89f098689112bb3ec8e3590c847b4d50b415f951b2e64074e52bf","dee621b62c107c5838953b0c3ac257dea2d0aeafcd7289da9f12bb5d60bc5ecc","3243bd66d1d4ff6cd3dee74a6a79da6d71ded55413ee199df81b36eee7f9aaf1","20ef0393681aebf9857f91896e4d68a637e156c48a1328bb56d85a1cc381b124","83d7fecbf316a8bb65f6e8cc168b05af182f64f120300338b7599ee58d870dad","f33830fb240c498bfb90ed4544f0b1042b70e0584e260584204d58966911980e","b16027fe2b380a7ac9563ceaf3de6c51b4d714d6a037cd948f12111ce23be9c8","453f962172aedc32eb37e395c8cdb7d9ce578b1f2f396446f685a169153e3630"]
Anchored
2026-08-31
Public log entry
search.sigstore.dev, log index 2657634507 · entry 108e9186e8c5677ab840…
Expected log hash
e92d5b270304966dfd65dc0d9d8022a5b05931f761c79f5d6dec1128a7483f8d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788146824604","kind":"published-quote","locale":"en","page":"theme:pixum/packaging/en","quote":"The only thing I would change is having a box with a lid for easy removal.","rating":5,"review_date":"2026-03-12","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f0f62c56ff03…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.