Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The new invoice template is, quite honestly, rubbish.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3273209361

Proof data

Record hash (SHA-256)

29b394b9db27fbb3788717e7f099cec774e93f99836f54aab868e632c1174263

Signature (Ed25519, base64)

XuJlosv0yh25DCsOWBuoTrrzl9frtqMrK8AaOcZhkNryNFfU40wxpH7UrPfZD1JqUUiXISue0nsK+KP3u1vrBQ==

Merkle root

6ebb2d3fb78e4a08533ac6b6852f3c84687141ae9b0e78424d88bb4161267bbd

Merkle path

["29b586a6d2ad9c1b4abdab521810f0947e3d037ba6ac77ec7136fd5605ed965b","37596fcd4ee884066a750120c4499fe54c527d16322aed4d1401465d8d4acf28","1dbac81f2476c262296af6170f29f4003aa1990ae3a0ed1dce823a707334bb21","857b08612a520d097610b9e1379b504432497590186673b452cb0f44f42dc76c","eb5e0ae7127c319f8744d3a64db22737f86368ac0a420361a4cd36f528187de1","9535d8876abd84d664ae51ccb83a6bbf0cbbccbb653ca7f4ba0f3231260b2c79","ea686a0341a32903e7797bbb6530f919901bbf55f9a5475276ebb5c8a59c64ef","dadd45f2895eccb6ffbde129c446b83f81357d825f84e1146c45a5079a98ab7a","e2d854bc33b167b6a62c47feed748d537f6bc620008717df2fb8747a4e190a8e","92dad562c0ae81efb9c22cb4a0c96d5566ac3900bee0a61ed1b3c342720c0f16","c6505d62fd1f18a4c80c5faa97487c91b8a68d4c0c27d65e4983982245aadb62","fc73c2b0627636c8f676f008d05fbbd4dcfb7ee0af08432d0bea252601b2007e","b2809ea8af334e57adb596cf07ef2c411ca41ee72761a0ae0fbef01d75a71a23","32d6dd564d479cc6b7834d44d5078d8ebc72c40210e72f0d380fac04d2d8e87d"]

Anchored

2026-10-16

Public log entry

search.sigstore.dev, log index 3273209361 · entry 108e9186e8c5677a732b…

Expected log hash

bdbef22d23477d2ccfe2ed182ce8ec54934b3bae489c9913db850af171e33062 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1792121074379","kind":"published-quote","locale":"en","page":"brand:xero","quote":"The new invoice template is, quite honestly, rubbish.","rating":1,"review_date":"2026-08-31","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a95094b7ee4168ed2b48128","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ebb2d3fb78e…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.