Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Their product is full of bugs and does not work.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1d45c26c5984ff31b0159a22945c57944bd9b3dc533c5a585f61520ebdd20af3
Signature (Ed25519, base64)
sfAoZzRRi+NgEEH4fZaoZYZGtrqfc6DB0n2/HbeVfVCelcNcWQLV5aY6a1McpAUVMJS/HnRJVTZcgGmpYo12Cg==
Merkle root
79268b3be1e951447ad916daa23d94d3a225505999279adfec84e5728be030d6
Merkle path
["1d45ceb1b679b1f7fb4fba4ff99c6d5ee097a8f2943ca50272f14dc24fc317d3","bcb62050db04778b489ae9895944c495599e8e44082530a9363c7d35ecc88e8d","4f05df736a376b5f9ee70114e4aba82b2bb3c1894cf7cc8837d552527c02357a","5d097d90d9982e6874192ad36569a428c0adba6df14a3ec33c93f610deedbea2","38203e44ad52045edcfb3cce79bd7223ff18cfff6ebd078154c8aaf00a9df2bb","91d483dbf3aa79521d5bd254a1a067ba7b7d9b9f489384dd702b64841869ddcb","dee8d301769517082b9d29745825c5ef593acd86f1a18f6ffcd4f4608b9f515f","747620e4cea5d2df2e9f06548583bf6a5430048669bc56fc6b327f58d477bbe4","e8af0961c41e5498626445a4b50b11336b2516e43dfa5e6363e46f9f261e0373","e9762b4f852d1d18bc2d04bbabb2e592f0c542180f14f68eb3d69f1edaeff7e2","678ceb3344c76dfda7371727396ee96e97a9f6fbea78f28e083d8e2fe3de2f21","385e01036b50aae7fbf449763f02e352d0eab1178ab2a26b3b0e3fba537066d9","ca0926b42bcdad354c17320adc5661c1a0407072f1d5c01424cc2e7f9a3515fd","b8e0a41590cdecf5ee846d5a4dcd3ae91c8a0a052b75fffe7c4c5f4e2ca53884"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199014646 · entry 108e9186e8c5677a77ce…
Expected log hash
55430b734e4d00e4ba9c340c7ab064436f91281dd4cbc27c1ffc37d3e26a0e3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791688566698","kind":"published-quote","locale":"en","page":"brand:wave","quote":"Their product is full of bugs and does not work.","rating":1,"review_date":"2026-06-29","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a42ddf3f7214cb4d689a3f2","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (79268b3be1e9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.