Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The issued invoice was way too high”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
18785b9330137769096c6fd912cd8418e9747667f48f4a8ca0045da644b85e2b
Signature (Ed25519, base64)
ozlWBGj9fi08+8VmyjhTK/jOidkemLcS3X9/iwksMFaoiPWzz5bsDvw2HfGlJiOhmOTSdBqyCuMSBTpQ9l/cCg==
Merkle root
4354cafe0e2ee66c200238a4bfe005f997e761de26d9e528ed6c12dfe1b33129
Merkle path
["187e6f79360ddba1ad50590fdb24a8c1166f26ba2b043c69b76ca1ad1da45006","8c4e3234a9f590f8526b5b3ff78be615d0f454443be0c091808b4a8cb12a1187","f49bbac3775f57f4296a4a6e255a3ad905f8d741066481bf0a5970d328832a35","4b1b90e53b7454fc77e7604c163c874dd0950c022789b3625b5a20039bc15b17","c991afecb7136410a79d2d36402109a6244fec6d36731fb847117052340b99d3","3ee8065630a212d386a293f10a89625ea60d73a1661421074fe70e0cfa97db8f","19bba64ca3daa25f5a8246bfa8510d827d947ba5b80325e355a7f7e2a205703c","1db10b718c5999d7e825a3b9cd26f538585ee155c587fb21f33f24850163ace0","82a2c8d253ee854a0f60d88960b72717e40c3844a8b8c8de20a39ef4205fd875","6ef1cb9d1f9e9de9b74646d55e5a597022d7e5a634f0a3be455ef1a3140a4b1d","fc8fb750821cb2fa48191a0a0dad92d65c75da833a25d52017621855585fd355","b7c031c5d5a259b30d42108b4ee16783cd741d935b245cd223ba5132a4508cf2","8768f82f7b88a738540ba1a3e2c8c04be4a2e7d425276e7dd71d0f787a7200b2","34012874980befa2c4e79572fde2605e3883df8e5878fe4daaeaa8bcd10c4d2a","16ed4be9ece293c235c5510e2cd19a05055f034548e73c12f8a9947de7b32591"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2542443729 · entry 108e9186e8c5677aface…
Expected log hash
1f12c9d846c7a9fd8aeda84057eb4d8f639bf78886a62c6290a2a60cd48e0812 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787280389476","kind":"published-quote","locale":"en","page":"theme:sunrise/billing/en","quote":"The issued invoice was way too high","rating":2,"review_date":"2026-06-21","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a37e6d84cb7845ffd490ee2","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4354cafe0e2e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.