Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The mug I ordered was exactly as I had imagined.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3fada19372b980e9a7a97b657c2b2405d2f13722a18164005bacd40d7ec8d0f0
Signature (Ed25519, base64)
0KPtIY2HwWXV0o5HH0KM432ciXZ4fI4VjqZUTLqyNrfLmqMSkZCzlfJ+0+vD8ow8a1qsZuu4DwX9WiRxS4awCQ==
Merkle root
b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path
["3faf7714c0bcf4a3a7958999d9887737ccd0e3a7215a942fc2db38a9b6d83ba0","d385a9091f689ffc9764f93ba5005891329d9bafa4e14c85a93124ddfdae50a6","9d6ba47472b7dbe97880dab9b2aebbccc9ab149e7bfcea5c8859a204eb6c2d99","8aa4ac6a7762ced5e689e36238467483c83c4379d3a6fd07f3f8304ba5428f33","4c89c4146671d07d844c3c1df28ae20d759288928a933fe65ca3183d243e3316","5dce83610b4971ff696d904ef4aaec13a9e3621efdae52700980c8e9af89a78d","6e79a65a4a9f7d2f57e2f5c054c1e65b9632dacf7ed615c055d1bce0b344a142","bd818f0b8b1dbf8d4dd6ee554ae7625736c16d73f81909ed5620c134032636e2","ef90acf88b9b7f664d7dd80ab2c089e7f5e0566a8530e8d237aa86095f748c28","092fef408f408e9d0d5099a88dc85d5aab5da2f5251c40c36d3ac42da221d3d4","9c05482c182ad0e5a1bdc91cec6243e52c25ea3e684a9ae7d07b22e381f0169f","06ebcf4f421280990aa40be72bace95a1c58897501e8472347512cbf61f3441a","1c4a3fbf336b1dbbe624a981829b71610e2551e155c099783fe5f318fcf85e8a","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash
687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787134378129","kind":"published-quote","locale":"en","page":"product:cewe/fotogeschenke/en","quote":"The mug I ordered was exactly as I had imagined.","rating":5,"review_date":"2026-08-03","source":"Trusted Shops","source_url":"https://www.trustedshops.ch/bewertung/info_XA246759776EDBBCADB88DEA63E6E9032.html","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.