Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Using Nexthink's remote action feature, I simply need to initiate the command, and it runs in the background without taking control of the user's machine, making this very flexible.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2929513415

Proof data

Record hash (SHA-256)

26f18910a9309b4f198c5495487f1a2be7ba6c069c4c86ce48273d8be335def8

Signature (Ed25519, base64)

MDHbUpd9iSK5h0+brBFW9/YQCASYIrrN3zhT8NoQcN9Tna8mwnSN27sikSpKt3xrjWvLc2nwgyb2EBBiAgtQAA==

Merkle root

277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2

Merkle path

["26f0f368abed177d5fd3ed644c3b232a49ae6aeb7cbb5aa553c4adf417360f8f","4ddeb76a12da21b4b21708b5021ecf0e2ce4081752388198fadf9f41b48e253a","b1ea32badfb01689d856159564146b7d7756ade634169f7ddd5834d6c37bb835","052de3660d0097de62d05c49417fda1a432d72af809b7f4a72c06c347121415a","beba4dc4ee0296b9158133196394fb3d3a4026d249fd68f859ae74b79f9e9e97","e450225da5978f92b11c93f0e82b99e3a631b84208dec28b6818b119e23f47af","603be7eec7c4c8240e9ed542878af199a720bcf16c5be565eca0db34f1bf43b4","0417a37a7d18e68684b463ff2e8a743ad39b63db5db282abec45d54c7cb31609","6bd26b333dd629fcae76270085c2d81f69a0af6a2bc5fd2e0f601915a087a4a8","b7a3d41c245a752e565dac8ca61cc9c1243e7b264cb8c32006fd331893948355","3396d74d572003ee8723799c4479726634cefda17db2058d492c5b9840098b7d","e22af44fb49d2b04fb7ab31e443c3ee0a9edc15017590ea83b2e206038b35b0e","c68553b05062bff5e92df6fc931b0fe41827a2af51cd30b80fefce371f89e614","1f7b489a0f1f52a9099db1823d706668c4e68c1e17b4e235c9596001eb5af1b6","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]

Anchored

2026-09-24

Public log entry

search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…

Expected log hash

9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:nexthink/quality/en","quote":"Using Nexthink's remote action feature, I simply need to initiate the command, and it runs in the background without taking control of the user's machine, making this very flexible.","rating":4,"review_date":"2026-04-19","source":"PeerSpot","source_url":"https://www.peerspot.com/products/nexthink-reviews?review_id=11251694","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.