Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“no gesture or compromise was even considered”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2472843658

Proof data

Record hash (SHA-256)

1a5c9ee4a5d233935be7ad2a875ff284efa6a10215f313e8af1840c66f8ba8a7

Signature (Ed25519, base64)

w0H2IFCpKl6xd2vOUG8PILraPOC2jfJK+8+/p0RdLgKMFwP/JZEDrLh712ruUZqwWfoxOfkejPpPUDI6y0zzBg==

Merkle root

c373d4e92a0f0a999ee34abc270a7b69ec2e962846b5c93e34fb037f6f52ccc6

Merkle path

["1a5ad79233b5973e89b8ca813c60c93b964e0b8268d7debcbed9210fb1e11b70","22f9b754c963b257f5592c825d0c29b958970682704ad7a9c4515ab1f4238466","4c2090836cbe08b71b73af09080eb6f475b2c02960c9d0cff0973ab9f2ff5241","dbbd00ffb540d3433497429b1430fb51603da0df091d0f21eb3efbd0acf4c645","1b0855fe7f05d4e7fa84672396e6bae1d45f7cb3a065385bf4780cc55151b9e0","105a4411298667a5c6ad0d1e4bcc2af41f3d65a9efea60f474ab66cc92204446","f8bbc34ddfb301517dc8a26ad503bd35befa4fc8a980eea5d896253981178330","0b604e746b586c20ce38d2f08c8f210da307891d769aa6562654bcbddca35742","6e624928df58e4cfbbbd8b2c0f1fac1414598f8777ee46d77a894c1a447250f4","9cb79c91408fd170ef6e6b3c1c901f9514e1d326e9b850f7b7b85ab8ffd98d7e","ea37cf4adeed4104c62be319e33e65b3d85c927304bc2e182f7d62022e818316","b0dc5b7aceb73bb773d2864962958f27a517cf48416ce4324cf003b32d5c3044","576f907954ae138afc5d4baf92ada14d4db33c393e2ba87bb7c933259c92b16e","5bb9dcd005b1a0fcd76915a4257b2f7ba531b1cab0875d9c269afdb1d06c69e1"]

Anchored

2026-08-15

Public log entry

search.sigstore.dev, log index 2472843658 · entry 108e9186e8c5677a32db…

Expected log hash

1496b70a8eaf97ffdf4b72bb9d3d196fe264d7f7dbc2f184c94cb7d35db7eee9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786768522431","kind":"published-quote","locale":"en","page":"theme:bexio/service/en","quote":"no gesture or compromise was even considered","rating":1,"review_date":"2026-03-20","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69bd20f866ba52467264fbdb","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c373d4e92a0f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.