Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They allow me a discreet one-time refund for my fake iPhone case.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2621780523

Proof data

Record hash (SHA-256)

23b309f7f445e465736490ef42e54252f1501ff0d9f55bdce41e6672d35d0d21

Signature (Ed25519, base64)

+xG07ONz4QqpOatZdImzoO1ZfmomVUngaRM/UDc2fLU714JE6QF2ugNpFaZWXNgjkMpWYrAL1GWh4tux45CiDQ==

Merkle root

7b426d9a8e4778c60509753003c7b551184ce3f76e1db9b678c604656c147d81

Merkle path

["23b6836c608005a24477ad51bf96c1867a68dcf76aaf49c2b063329d92073886","1f15cfa6a340f20af1f3315657e1116327502554a68be86767e7ce32463a0a86","25a77786f0346317b763f6e1b2ff18c6cf5dd007fc567ec5d09114ff8afaeeeb","14acf33b77d13024b688ed569ffb53a97beb83e0ba2478c3b5357a7d59b91790","00104e2d427e8a8c992c0317140268f2209952eb5070d17224bcb7f2a49c0449","52b3baa3cf961561595e7f85fbf8f041a5b50deff4b7b42385c00fd39f08cdb7","be9f0ee79c5c2cc0e8abdffb70e88703facc2b6dd2ca2d6cdb3231460edd2fd6","63d88068bc4b42c137ff91166b5bc6567afdd63e5c8b09d2914fc044fbeb614f","04e5527d1f7fe5e98d6b6482e4aacfd0ec100eeae32bbbe4de20ae72503a955e","16cc022abf1d4a4b1a85eeec0ace0cd6b549774a7c5c650765050568665408ec","a591f0248c8fdcc1f0c83660596085ef07c8a7277f2d67c9b2d90d4ac5ef3820","e5a6f549073b99fdf990eda7506937db034fc236242c8de043f43d51a48fc6ea","5d99da9744e8307e1a97e2467f68825a2078c23dcc4b995c9e783f8caa323115","9116af6fd18052ff80cfd3abad6fc438171b3496be1f90c0fc1ff476ae16bd31","6fe79142608c1fc8bf2fc6f4e46810b02dde5a2430135fbb3f3615b6e79ae38a"]

Anchored

2026-08-28

Public log entry

search.sigstore.dev, log index 2621780523 · entry 108e9186e8c5677a0666…

Expected log hash

8cedab57a40119bdaca7f2b5c6cf9bb1e2c3e69dc6a6b7339d16a6592c70750e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787891923870","kind":"published-quote","locale":"en","page":"theme:pixum/returns/en","quote":"They allow me a discreet one-time refund for my fake iPhone case.","rating":5,"review_date":"2025-08-12","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_X3DE729F568C455BB31536436C1CD5BB2.html","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7b426d9a8e47…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.