Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Critical technical issues.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2658211220

Proof data

Record hash (SHA-256)

0ca2c6b01316fab19b5e644e15a5068a02714d87e7bc8b6ba26f79d51e45bfda

Signature (Ed25519, base64)

G5a4s5SYUpDzQOxwBwkJDOds1CyQswkFFhLqBnTmMNI2/ZeSTYrUBbF+HUQyYJtGwDdCOAAm3T45g1sHkle9Dw==

Merkle root

dc262458aa22478fffe21ec338d01c6f4cae4a788ed9fea3c30831a82c06da82

Merkle path

["0c9dd0c43e68d4a34047e0067689b898148c6d437c8efccfee227a78f97550ed","b8cebd064e1a3b90a1074b9e6c82361a02a8ff892e7216c6315ada219077b069","3b2ba76b7d15688acf2403ad89ccf7793f63748f04f0f35ed829fe912a20e0f5","a9e4d765f6acd48168d86b4d94b51cdccb4a20531552845114ae33128a75c9d5","60238fc20227f3f2ddbe2996a8cc944775378f4b7a3845e6622c9aa68c9f22dc","3e5362d4c6bb8911efb0832463012ef8baac698e72b4659b3bb629e4f3d4bd9c","f46c8609a6961b93ce986321831f1bbfe9f03515367cebc140ccf0f343b809df","4d8f426e124167920cb2d7b2265c5bbe0ca61c5b2a53e4caa49ab2bec40cc656","5ada6ff7cfcf549d423e95cd7f058889b3c93ae22de7b3f2391bdd9b5f30cea3","f261d4f8d61d01c5cb49eefb40d7793ff1e00cf6568ab148cd61a43b3cfc7b90","e757a1208df32559a6f2868aba381be6a2ad2ce81a7801cccd6fe4cb7e763826","109feb850a277e0b490ee3c60767eb9380b9740ce327bee7637be3a60c0cd37c","bdc9b750f877995745e1cab86bfadadf81a699dc296c03b30c7a277ddce4ad9f","05b68ff1f996fd6d87089c04d3b63d00c2f9717b69cfa4ae5a0251e3fbd668f9","fa0b5c0e2afc2db7f6b3a78d277777500a36d9f343119b2becbe97376b611a16"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2658211220 · entry 108e9186e8c5677a6833…

Expected log hash

34743b52c53937c552d8f13f390474d4daf1803bc63770b1d5dba985fa233896 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788149612113","kind":"published-quote","locale":"en","page":"brand:bexio","quote":"Critical technical issues.","rating":1,"review_date":"2025-07-29","source":"Capterra","source_url":"https://www.capterra.com/p/153203/bexio/reviews/","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dc262458aa22…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.