Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“AVOID AT ALL COSTS!!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
27f304bb88860a4ecda85d2ef6086b1d1a15cbe53ede5f561c91792512b43a57
Signature (Ed25519, base64)
ECaom2K0ljDH28MN2B6o5y9RurgXaLGCugTYTfRaNoojwWYcbGc9hX1qZq+yiLo8gfMNocNya8aZ5ANVqlE+Aw==
Merkle root
3ac2a65164a98b25d6607e9cd20ce9559bf4391886ca2eae943b9792fcb8a323
Merkle path
["27f9aa4a3b37ff8a30ca9a571c264e2f87fcea4e217ebab730a0cff593436b78","0a18cecdc05df2b879bd8dbf6b5f6172a4c6f3adb3c3b3b053f0024ccb77d058","f12e69414913aa17a673e93065a2351bf36e39c3fd4af9d7531f80ba0e057b71","91163fab2b4da12ce483048ac7913f514dd5789d17d8481a331252dbeabc62bb","feb36f31cf0ee49db3e73a064c35bd06dfacc34f5a2d37ecef670f89045cce4a","eb29b1eb4d96176d9ee4e9dc8b4381baf6bac375a2454824118da2ababe409df","8fd7847b79cd3950bd0204acdc569ed1f52706167736530bd44711e29f3a323e","2b60dc025b9ec95cc3af3b17dc488e108a2513c415ec3a97c742f75037168272","89ec072d21c28e4ead00b2c83236b5de60e20e71caaaee2e9933a2cd22b23df5","0ec8bc2263d1efbe4c5f1b8e1b15239cc1dee1cfe1b511cf98751411af1dbefe","8897d3da7deb9a3ecb6651c49d6fe32d2eaedbbf2e1577cc1170979b95da979c","2094ab83c3c47e93e56205cdb18aac43fb141c04c25a12152217e58fb016ae9c","18d7e09a11c1aefd8f659754a760d772ba4400d2a964c6d68bd3555565e60300","900a8ed1297dc836a8b3be52e4e74bbac6319948157ba123cef010c147d9cd86","b933f107006d8bf043be83ef3bd88a04368b06893809d6915935ad1f675c78b6"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3083528439 · entry 108e9186e8c5677ac4c0…
Expected log hash
8816bf48c9e6a0b1ef2758b04fc7021824819cb4cee30b879cd603a10d38b8a0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791181418024","kind":"published-quote","locale":"en","page":"brand:mypos","quote":"AVOID AT ALL COSTS!!","rating":1,"review_date":"2026-10-03","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6ac03aa05c209406858c7162","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3ac2a65164a9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.