Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The new invoice template is, quite honestly, rubbish.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2789279696

Proof data

Record hash (SHA-256)

17c65b93c655d4b75dc9a597a7ca840db855eca6bd2afd55bbbeadf172454663

Signature (Ed25519, base64)

J5o77dTzY9VF9qXT1i3PbJYiIWasH4O1Xu7OREKmTa9KIfFV27hoKDdIcuvhY10rZiZozVFbAmG2TSkWFz9QBQ==

Merkle root

97eb1062a862b99998bef0a84476eb3c3812bb77c2cb927f4fd2933b59da9e3d

Merkle path

["17c3ea76dc00223bfc846d282a3dfdde1fad353d434c8680563ca92a46879c56","e1e80f947b3945511fd1c5921731e8b63ef67c1f1f3649a14eb9f7c0f12a249f","991f911b43c62781bad42f00024f93b6e990a37803966cd2dc5379f57bdf0b23","53ebe4eb57ddec584b77bdf0230afe4e323cbd3449e234471800a50fa951455e","0c1b9ec530d33c80dfc2003894333701ba55519f12bab0cd50beb7cbe4dd43c2","fc6525ab099f29c50421573568cd6a00fd85683557cb35cb465f74146a6aed64","552423b198d741cebd8721bad599064ff4236feb327b991da4c2b161d891a825","676b93da48fd057de0f52b3298ae58752c0c6f1c4f034a24ba18cc833de73532","346f4f9d6e7e8fbb70a7b0ac84c8295db9f5b611f5307e0614f0c083c87170b7","395b180c77ccd11120a7cda4cd1dd93f02a32dda4ea752d18370c9990eeea689","3debd39a24af6852066a31af419923ca1fb9349fdf8444f76aef62b0f9a98230","7fc459298391904a3838099fd1a0b7e635c26503d7f861328c446e440a4bd8b4","5b47260d99d2c4ad6e0d963995c990c8506dbf10eb0b146a116c3fc6ba348071","a9559f2ca8536f2c18bf059f3f0099d62235a93ac35dc17b09967d392b72be7f","01242865574478f13dcf9d888236d7a907264abdb87f360db7db06de0945075a"]

Anchored

2026-09-11

Public log entry

search.sigstore.dev, log index 2789279696 · entry 108e9186e8c5677a3885…

Expected log hash

05c7009ecf7ce5cf315c252c2a1dd135e64989a02cacdaaa3c5a87412a2e921c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789017464005","kind":"published-quote","locale":"en","page":"theme:xero/quality/en","quote":"The new invoice template is, quite honestly, rubbish.","rating":1,"review_date":"2026-08-31","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a95094b7ee4168ed2b48128","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (97eb1062a862…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.