Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I get all my business supplies that I can there”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2684135818

Proof data

Record hash (SHA-256)

14f02ba35e0ab24229d2c12eb04e133722f7230f1becf19c4c6c400112132b39

Signature (Ed25519, base64)

2vhMRiya/UVgeS+u1exGICGufNGDxUSH4pZ2qFZdtOVdeMfKZqgQ4dcDuST0gu9v4RlzqAd/Hctl4VKzaqdLCg==

Merkle root

b3122ddd7ae78437c88b5c432d1d272e932d99a36327831f741296c5804e0eec

Merkle path

["14f00e2a5443c842a1150e6483c2924b1a12699716d668c389907933c2fbe141","a9fc956f8a4c7913d203470186085edbfbde0032f9b4d9865abc7edf959424eb","9ced63d12cdb519fe296d1b668370fd5fa636395a8eabb72b8b216717b12a718","60a01a6d50efa8443fb46968f4635993d948e6666b0578c0f83b5193ac938a7f","f1d98ab3886873d658adb4f6f380b0cee820c8c2e424b3c91e833f9c9d0eb774","9e8785ed8d41d1b5033495bb117714e29ee006a6a3170f86cccd0ad42a832536","bcf3972ebf74d09c356a5facc406ce7e9178f3aa175067e29e109eaa5a16bdce","658075a8a9cae3b3d3055c46cedf2b31bb763b5d56e873d3db7d4f351b308827","e1fc3ae1bb76f59eb840733bd6cb0a568d452dcb042a953c8cb568fec2208a26","417b74fb65c84f1bd7ca7b5be8d631e289cb505be498fd3d3342077c1886fc9f","2af72f591887434887ac4f04aef10d065a53ca23b48c80d373c3274b5f82853f","afc410f4c7c2995a0b70eb5b9073e0604c33387ebf2e2381b9760ff10ab70cf7","c22e3ca4e13d6be34d7e2d787b0073655e272c17b975ef51a9080763273d2609","e0f5a3f9535914a67d876a5c4daca45483a20818791753e411dff623a270df15","3414a8c2f9a037e1540995688a310f939676497d9d86d0c2118ec57a53e60c3b"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2684135818 · entry 108e9186e8c5677ac65b…

Expected log hash

aa65ff4939d7df1f40b93b48ba8bc57094c1090543a7b0494509e8f24b5559df The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788334509514","kind":"published-quote","locale":"en","page":"theme:canva/ordering/en","quote":"I get all my business supplies that I can there","rating":5,"review_date":"2026-08-11","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7b975cf869585c839f40d1","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b3122ddd7ae7…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.