Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Banana Accounting is great for assisting with reporting”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3258071454

Proof data

Record hash (SHA-256)

36090d78aec5a91c131a54721df36fb61ef2f37c2585a2f13f0ce438f27db0c6

Signature (Ed25519, base64)

E7i1Dk3wUJ5fffbCfbul4tVNTrA/p+//19629o3R8XZiNAMDmPuDY1zapL+D/gUDKDRu47uAQbLl0n8JXnY0BA==

Merkle root

3286418fc06d25de584969d1d1d5f4b079918bf6b5a5178364cae8b78bb351b2

Merkle path

["3607e64f5fe604d4c0a9d0f0e9d111f267a5267142835e9e2fbf3c325e8e4ca5","91d020057441625f0ba579e06008e3683715367acd1b060987de0bb531174bee","1188bffdb35b6a1e24b3f49c6700f3f8dcbccd57f107fe6b027fe0959361470c","076f89ea474ee6206b466510cff478174dd7c3c77d6af753d6ad45916e6d9d4a","a5800529a398e3434757ad4eaf3f668225413371da7da7abb019568f7a2d8d28","c351c6b4119d87584bbe7bd0bb0d72c7f67f486038d3d89f47c1e88b39d8c4e6","64c3d431a7388a88228572990d0abc9ab3eb7f04a36b3e6cb72c176716e9fe93","26a8caed1cfb984fb9707ba891b74336894ef29bc1240825fbcd8072ada8a4de","4c9c49d88f72cca12e5092108d1fc442bafc53b73d7bd763782709ae6a08d723","70703bc896f8d3850896304d915e4569aab5082e9e5cfd8015a47a1a4eff58a8","fbf0beecd3644a0b1ed85afe1d822ac72eb6c6fefbbb832dbc0449418be397e1","18f743e4293ac0f418bd2370e18523fb86a3c1df20723b156051657b751cdb54","d9800b1b87d047478eeb89f8a1dda19593d3b273c40fa6d591a1b944763f5e83","b4d8773b8032d1dec9dc6fa4ba1d52baf4d9efac6a7cb542ab0617b855dc5284"]

Anchored

2026-10-15

Public log entry

search.sigstore.dev, log index 3258071454 · entry 108e9186e8c5677ae2ee…

Expected log hash

f9026b3bdc4a2e986a01140b2370b0ce9ec3e7c9353055dd7c9909c6a9941809 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1792030101458","kind":"published-quote","locale":"en","page":"brand:banana","quote":"Banana Accounting is great for assisting with reporting","rating":4,"review_date":"2025-01-27","source":"Capterra","source_url":"https://www.capterra.com/p/181146/Banana-Accounting/reviews/","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3286418fc06d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.