Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It is clunky, overengineered, overwhelmed with useless menus”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1df9a01e463c1b5490cd6d726b885a1dbd0a4174fb8ae409a1f648bbe25a918d
Signature (Ed25519, base64)
1J1a3EzR/CqAJ+mqJRjPgVgkT7JiPWZlYsWmtV+6Jv7ap1obUIStPTjhvDVs41HMpU66GoA9SxQU5FjA9qEwCg==
Merkle root
fe68a9ec2e6207dd1414683dd183944f75125b6c2562f0a23abbd81e00bcd90b
Merkle path
["1dffa0f730401b3a6ceab9b8ee16334e505d80c00f2345030ee38444fef70685","e6ced7ff6e296a25d4a93b5a6a7d3f09ddcf606be696828c7ef9b29069eb4ee1","962276c64e8fb3163f1ad888b3abf9b9310fbc1ed7388ded268fbba3d8227957","373ee9b0220c6a931688564acff3a65d54dc1bb847818f7a00609cdec90dbc82","97556f71abd0cc1d59cd16e38a9de7505c0914468409d9499dd13e755a0f1949","8dd94180a5ed933bda9836d2bec7e088b6584f4e8949815e50e30a046c229b6e","8ab134361b99fc4ced14609dde79675133516726a7d5501e8890323a69598b46","7a6b4c627bf647fed6ece0603ad29633cfedc4b439b2043ab09501658537ba26","722b90f10e62b3e1deac07e911f954a240d544e3dd2c300d373cd5ea469fe26c","fee24f3f6b13d5b4769986d70279c1cf938f8928b09abef20cd58a91fce88472","edf287f173bc87b35240f2b7406b76991c5d5fd241fc6332c5e7886277d65074","71449f555bbc95e1e5e07b87a9e02209fc08ed70ac76fde216c00c87ed0b486e","93f00b982f24a21c93ad94f3b06a01239412d63557bf3cc0fc81e8815ff01fc5","6964472ff8161cf1d11ff1df4f1d4b619de3c1f553b29120f683f51838cd8531","eeb1d944996c95773acfae0ab38890a16747a23a572977c9c76e24b2581f0338"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2670985056 · entry 108e9186e8c5677a5868…
Expected log hash
a3256450b43380deb044f5248848190a4a97d9fd95427998eba3c6ad83d6bee1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788232129626","kind":"published-quote","locale":"en","page":"theme:acrobat/delivery/en","quote":"It is clunky, overengineered, overwhelmed with useless menus","rating":1,"review_date":"2026-07-14","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a557c71baa2a29db2fd9abf","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fe68a9ec2e62…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.