Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They did offer 25% off for a purchase online”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542342116

Proof data

Record hash (SHA-256)

fff8e478332a6f4f011be27c871c5624efdf24ef8ed05e2257b4141f4bcd6327

Signature (Ed25519, base64)

709UGgzDlzyMJ22KvTgWpqDMjQ/qFOTc1qH7GtnVx5vUOk8Z7sQVQXghPBnLi3bqycO7mpFwCr7sg83iCkNnDw==

Merkle root

13d851a0949e31431bfa3cb9a632b995c3cd1c62cfaf1eda783bd9224fc47725

Merkle path

["ffef6d7a0336cecc06cc4dbf826886beb59a49d4257eb3de0beb898b35b12f48","bd4197ea73504f57d8229f3b5b1dbf022c4ce5e20acc7eb14a3676d616be1f31","72f26339ce9e39a8737ef49a93d12ee7e5b5184a22ee62163615ff3bda7187bb","b8f345746f42061724a91f179099b9e0cec0de7304773d0431bd5d3b0a04b50a","d65e152830a32935de8791cf561beb966823d32eede8a25b03d3f1fc204c1dd6","5454dbbee2d62271293f5b4e11d796655784b53d994932bb32c301351f51fae2","431dcdc579c3730fc3624dea68c922502b4174cb7075523fa4790921eb0f9ed1","03052759e45cf1c18fb83b57bc05de2ad352315c0491b703b2f3796e6df81b82","69d18b1d5b464a04618121db55257290835743f5c8bbac0978302b1ce0fc4a67","8aff7e87e9ed1f4a1fac9ffd55d4d3a5c941cd6255d5bd7b04e631234e2516c0"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542342116 · entry 108e9186e8c5677a49dc…

Expected log hash

44bd329b5c5f42e4fbaaab1e9a27845aedd26351446bc96ba12b520a563b7433 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787279544668","kind":"published-quote","locale":"de","page":"brand:fossil","quote":"They did offer 25% off for a purchase online","rating":1,"review_date":"2026-06-17","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a32fa07602615382d110976","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (13d851a0949e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.