Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“You order and you never get your items”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d3a705a57c516346a7e5486e7eb5687a332e931dab4cfd8d23fbeef53fde5ee9
Signature (Ed25519, base64)
ofOfZEQjNW27cpH2KBl6oDtoh/AVvUMCnQjAEkP2G2SF+fUk6JqjKXTc6di7U7cp31IIZ9/iJof9jCDEjKsvDQ==
Merkle root
13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725
Merkle path
["d3b0fb21aabf721a73957a168308f2497a5f09052086bb6c647dd84202adaf51","ba2e7f1e41cb321737866c5edb0135b533c4063a90e594bcbb20f6014338756f","fd04dcb7b33b1c034aa5e1ddc7580936514aa296d399213778f4cd67c997594c","2943c21d2320237a8eee58c6abdd2418836cd730a95e73db05ab541c9a4aadf5","0ddae951b2bfe9a582e6f0bb91dcf9dcbaf7c2e55ff7041c007db705feba01fe","ac4e9ea81f235acbc9817183724711b926118656b9e3e73cc5dd07a1a59fe4e6","6d0347555c768ebb536d814ef4281d08c215578a15135f41a84993c922c79c4e","ddc84998f3741200d3329f20de2892aefcdefffc21f04c1d0d2b8e1af29ae09c","d4f228595b0755ed7ff55e92c880f760d34953c0ce89b0b3aafd7ced32c9055a","b4a92e8cc2af52cacc933a26aa047b7f65acb78843d3e6913fcae1539472ec1f","3045910e4234badc4bddc519360ee3fac363e751122a279269d40e10baf827e2","6e49601f128a20573af8d3b40647b78c3b81300eb01f21760024201bebe1d2ac","8598be1380672674ae23cfd4b229104516b5ae1ebbeff0c9d523000dd5484f96","8aff7e87e9ed1f4a1fac9ffd55d4d3a5c941cd6255d5bd7b04e631234e2516c0"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…
Expected log hash
44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787279544668","kind":"published-quote","locale":"de","page":"brand:mypos","quote":"You order and you never get your items","rating":1,"review_date":"2026-08-15","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a809b3ae83d4b3b9de88f81","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.