Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They declined to refund the charge although we haven't used the software for a year.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3163352270

Proof data

Record hash (SHA-256)

253f223d55264e34c2a921172807d6411d64367a279271ed5e6c5a3cf4e8c3da

Signature (Ed25519, base64)

F3ML5LqM3XX3WzMg8cmg5lK4+ysnrDZftJmJAveVcVA0NdqwNyedwsrA5JjBrCN0a24jAndRERhZBFieKfB6CQ==

Merkle root

784ff8fc3c42eac43c7d399f0d67bba55d28073a7e106789ae0c6c3f5ac9dcc8

Merkle path

["254014dc6a485d6a3de96f37fc6416424aa898012083d2fe0e18ff5cab8b3864","39f102ecc6196b601e0a02f3b2db71a11773637edf715bdfb0651a66f6f66bc7","816ffd2dfc15e12189ccd0c7780d764b0032c1cd8f27fae5f054f9807b22e1bd","c9166a4164b3c427725b1ddf4e671c2e42c130a2ebff1a4b91004b03015ff520","5f08488a76b6eeb0cd169a19c8f657cff68c3e68e415fc60c992e6ed21fa8b88","967d01e64034593b4410d589415ca7a7e88e4a635b0df5deeecf32bab103b08c","06341e74821434825dc520120086cbf7e9cc7bed7e9aa7201f3410b45665a137","c9bf14ad9a04712f54e5552cbd42eb184f77093ea8144aa2d8c4856c1fc7677f","15720fe91750091ac9f452479c53c3a8dd0cf97bc33adb255a318d06f1caf131","1fd886067a3b8950528f1a9ff4587464df7834217605413021526c5fbe210f8b","c9529055fe5b6b0f37b66764f65f279ec072fa3a305dfea6da010f70d30ab502","438fc2375d6ac60843ffaeba15cd4e6719ab0c0a256a5e1e4fb5964975c2e131","b2e795b1a28ca13f7663ed8f62127f0cc32efbf6296671f3d7800b760642c1e7","7c65cdc9460755a327943aea2ce97e2f5c6080d778d9434fe2dafbfbc1e3b04c","5fa09e3847513934bffaf71960ac2a100e20422698698ab1e19a4fe8ac133514"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3163352270 · entry 108e9186e8c5677ad020…

Expected log hash

a3ae0badac804d14d314abd0e71726d06a96c43a3840dc1d63acded9268c461e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791543790412","kind":"published-quote","locale":"en","page":"brand:pandadoc","quote":"They declined to refund the charge although we haven't used the software for a year.","rating":1,"review_date":"2026-10-06","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6ac54f99672a5f2ce36ed643","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (784ff8fc3c42…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.