Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“careful with his words”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1577683c0714f20a03646eb96060b26991376fbfe4fc236ce961c38528bff064
Signature (Ed25519, base64)
6KiPztCK2+YyEwg86kKfcRyJ32jiNn68LwHJrZs5n8nfQpsQB2kcKnp9vpaNsVUjyhZ7ChcA5rwNcFpA0+naAQ==
Merkle root
11760913b24394c3efea903b5693403de67f30c73517589265e62147ce6d7db9
Merkle path
["1578c6cf75c3a2bf1f94ad9b7e1b9b77df76b480049e9331453632b8ea83efde","540754af8bd520bf39137c5b84c597a62b333d6bda68a3527e4a9e65416ec512","521e311b8df91cb0995c855c6bba9f6d806e28e522ef40e6ccfea9c238989297","8995fef20e7826f4e562e9a63aad72c1298f31ce186213758a3af79ea7272654","06c2a55a5c19e5dc300f8e35adda342d8017ee00fb29633a14e514bd1e0774ae","f09eca4bb70af1a2327f44126493bdb1f5bcc9225857f076874eebfade21ae61","a36c81d180393d2376fa7e046f5911515c3f78de500cb528d432eecb47731651","c3f2f8f3f2ae3f574d78a508f44fde92e1eaf00af74bdf8d9ee02047e4b16f27","ce71c74528f4315fe8630e0b3ed49dfc76e56fff6853ec8ea202c2fba853dec6","da305d7f0b2b44eb4cd76b20342acdb83f3cdcc2c795598a7bc64d618c163c8d","bd07487b691762e95594ec81baf11cee57d318acb845571e5b299701c18b29d1","4e02c6a47369138d0eacb837d8bed87707d8edf6573bf9a07b0288ec7a1a3832","bd8f0b0faf9d3ad7c16d60f7a01c003de274172458ab1f670d78e9cc1dffd585","4d94d9a9168f14be08d81b3238e6d7999acaf99b1233bada5f6c2802401f1b45","8cba8822ab29049afd67fa646ac9379523fc6be8932688ce4f3067f563511db4"]
Anchored
2026-08-27
Public log entry
search.sigstore.dev, log index 2612584084 · entry 108e9186e8c5677ac6bf…
Expected log hash
0a57a1a3ef828bcabfde2971260e46ab649b0f8c2c96e231d49bb83e51a8ab3d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787801559681","kind":"published-quote","locale":"de","page":"theme:canva/communication/de","quote":"careful with his words","rating":5,"review_date":"2026-08-01","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a6d262e60b1e3a88997b6c2","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (11760913b243…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.