Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“Mass violation of GDPR!”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 2542342116
Proof data
- Record hash (SHA-256)
fe8937810ffee99de7f0518029f3fc6fe9e6bb92ffa2feef9be03d437e6d842d- Signature (Ed25519, base64)
EkP96W+Bz2waG8evulCejlWO99zv8pdplGelD9x3U6rL+G4aFaU0SPQcZaBFhRwt4wVNt3flzllygc7MhHr7CA==- Merkle root
13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725- Merkle path
["fe8aa479f1edb73f81dce2bcc98cc5e9923e27af66f53e789468d9e211161b5d","b527fba6abd0c4899a1e3ec28f85dfd1a0977ed754c0297fb0b2e3a209d98611","431dccea154c1dfeb6edb7f8c1ff8e8edb735df599586c575119511a74ee3a39","16c19332a0df23a4f2a19b025676c13fc9be31a2681db94ae1351b2a541703a0","fcfe533b43723b63d51f7fabaf38065ba0daac6370477f44d00c1bcfa50e1dfd","05411a5d870af3ef5fa7a22de42fea01b8903af6050230c09c191912ac2559ac","b7d9f05f67c15ed75505cc89faf932877ff127ceca78b25a3e49ba5029accd04","53177dbfe416cbd9751bb728755ea47fa1d1f09f23833453e3fef5ec78b973e4","97445dc42af6ad341b05b4d088aba676a6c59e85499531aafc54b7f77ee375b5","03052759e45cf1c18fb83b57bc05de2ad352315c0491b703b2f3796e6df81b82","69d18b1d5b464a04618121db55257290835743f5c8bbac0978302b1ce0fc4a67","8aff7e87e9ed1f4a1fac9ffd55d4d3a5c941cd6255d5bd7b04e631234e2516c0"]- Anchored
- 2026-08-21
- Public log entry
-
search.sigstore.dev, log index 2542342116 · entry
108e9186e8c5677a49dc… - Expected log hash
-
44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433The log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1787279544668","kind":"published-quote","locale":"de","page":"brand:workable","quote":"Mass violation of GDPR!","rating":1,"review_date":"2024-09-24","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/66f26473610532ac8458adaf","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.