Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is functional and intuitively designed”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2647332298

Proof data

Record hash (SHA-256)

1e5729a5470335f8ac9989213807ad313dc7e545dc39b1635e840891c26c7f8b

Signature (Ed25519, base64)

QUOcvtsJMEa+QwbpF6Zyw2EN1cZeBivUBBJJTJfPgTnLvYVNtad/lIe1KgAUVgu6SXfKOQkLOpvWs1rmw7FUDQ==

Merkle root

f91c744e1108c1bb1ec3259bf4dd752db9e3b06ce3ca7c817c48f3174bb949cd

Merkle path

["1e50e25a87b0d76fb8f63223f6d18ed82b0daa29a9135bd528b76733399c7353","67f156e9ff527a0d402cdde828f5b76e08a31385f587e6078b8bbd199f87fab5","52190beda1014be2f30880d77a510fb20f2587e9457522e57da924633a01bca1","2a00367815bf96bd96ffadee4a9b7e83d71a3d70c8cfe738fb8ac18de69bb102","bcd309f4def5a4a4788b742caf6c5f9267c3df71544b5e738a2c29a5b76d6f56","67366cc63b50297d1c6789cb4eb826a933e44a054d988b06261ec82047b3b654","1ec30620e3bcc535ca3b410c490f5ed30acca6cb1cec1b5cb2054e43d205b14b","5278b9d35d5b86fb7bd067b9a08148d93de6c4552c0ddc9b163103172ff70845","d407249864581fa2caa5052a9a6c46f824bd0b8c31fefd5b228d53a346ed14ec","1466dded01805ff8a356669a55d175cfde7d0b0918902842f0f294faac59dbb7","dbc727192f8267dbecd06640b1521583ea1a9a189b32f14628b1ecb92c26701e","75e3e34f8568f793dd8573e6b9e7ff586b17abe08cff7e4d83494b07d2840423","38add9619d9f1ac1a688809de34787d9c7d7b4d2116d16ab225a1d2f875ff278","939bb6f35c7a9334365aa0f05d437301f5b11fd1649b761216a467d624b12d5a","7e33dd613a6ba5c13ea4ace578351ca5e0375312f966275d25485ca016b59318"]

Anchored

2026-08-30

Public log entry

search.sigstore.dev, log index 2647332298 · entry 108e9186e8c5677ab309…

Expected log hash

5d995478a14ac45f67e2121505e769136cf509c045e6701e0235a25f639d0a15 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788058735671","kind":"published-quote","locale":"en","page":"theme:findependent/quality/en","quote":"The app is functional and intuitively designed","rating":5,"review_date":"2026-01-24","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6974b578d73eda0ed56c4e01","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f91c744e1108…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.