Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“simple enough for somebody who’s never done it”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
36d7c46d6966783e55859c32ce16213fbc7356541d19733848c3923381d3a929
Signature (Ed25519, base64)
slN2LyPtvB3S1wtI+rm6HBHYKnXr9b9pD9LVW7IAgnWAPfkAyac+Jg1RR9jcHp4Y/MXOpjJtDHK0ZEEkDPV7Aw==
Merkle root
3750a5fdf1ed10aa252575b51301fecdfc7c400fa1cc1f2ff8335245da43610b
Merkle path
["36d87b124beb48bfe643199f7be2ac3ca139a9207a754dd3672018e7381ea0b6","a93ecac2efa9781ddae19e2471f45772e7caa0a6ac441c371717bf57a619b81c","b7a2594bbdd5d74f3410eb6d92e630351b871f9265d59010f12310b2bd3560e0","19f00d4c7e6df724a22436f99d9fa8c30b57992da25bc7d74ef5c19cbedc1fad","ceefac2edab476cad84589d5fc565f07aa8ebe158a09168261614f0844fe7369","e5cf50d631251008482246f9297b5ee0dab516e8dd0f609af9c36ac3743863e5","4c8e334dfaf62464904f9e2e72bbb039f763875c6f69519047f036524ca498da","c5773f4737def7747039aa058156da15cd9db42df0fd8bba5ade2b65079f0f77","8ad4d7350d7ee2d26d9578a5d77d9e5ee3d105a52ffdfb9a22f28ad215e6ee9b","154210733b1d028e3641db5005fc8b5d8a9a676b7d09777de677f3d5e198be59","8592a4858e12b61f173f3b46d42a2e32b150dd61346b5d4de74005e2b02efa09","f3e91c539a5b823bd3dd810a09f3585cb5af14f485a442f648125acd7baac356","1dfe5acd016272fe02a085bf50e6510ed355c73b71aeb336f05812a4d28389a8","d3f60913f0f2261af2a1efa087a29b863f258046202db992bc2cb4f53d0bce0b","587eed16c1494c5b5ed63db0c99eac20f0d71c9f7de0d416e769324bf14ca737"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2685518693 · entry 108e9186e8c5677a840d…
Expected log hash
14b4c1422d781f8c06152e5b2b6bdb741e926e97bae5efd73712ab8c7b50b252 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788352576042","kind":"published-quote","locale":"en","page":"brand:canva","quote":"simple enough for somebody who’s never done it","rating":5,"review_date":"2026-09-01","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9733dedd97c0a5944c44d5","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3750a5fdf1ed…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.