Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I especially like how easily they can be adapted to match a brand’s visual identity”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2a086addc53d45c645ed07bcbb234b19368240a8039873786247ef1b56bd022b
Signature (Ed25519, base64)
RmI/ZkWGZjwWQ7xOO8J3++uvTIL8xqWpHfY4x1AN20y+ZG7aHHP9fQ8ip0sQ8RzzOmjK1um58GAHVmOptLCkAg==
Merkle root
ffbc979c8901fdf55f43c5151768b18a738fc1c271c9b2dc97349c3fa8ed35d2
Merkle path
["2a09b2f52ffc39ff9673f80346c9b0371fe8438e3bc2988889b357d810fc46e3","decf6e3a41eb9036889d1ce7de5220a8285298cbfb3af658992e20c094aa793e","1a4d0f6167c4f96e78f16ae6e01d8395d48cc4b77d480f38ad3c74bb41e82ffa","234ff3e04c47551c0cb61217741b0299d7dca363fd8be316f725dbde2ecb1724","642b2a7b906359f81ac681b5004c2d24725d333a90e459b013712646ededd66b","4b44a00ed20aecf2d22be42c3cd9422d4d50637b52f37f5e7d431ca7c600ecce","4ee9e4ae5654cd20209f74336d1cc2c52c5925309d08c6fd93318f682fc21cdc","f176d93f63bf66d39eb956852089f5f60064834075cfe33987b81969d3827384","99a0265e0affa8e2bf04f216308e2b8f7c17b56cb1983878872dd64a1f17d6c3","b36edab723caaacf652a98364cb5b5c80ecb3e3db537d01627a6448fe8d1ae7a","93e9ef4d70b0bfde7627411de1f2a7b2718f2effde73028a86eb469cb3475c49","7db894157ed9dabb03cb2365fb7f1c3175f5c464a5f6fd3024b83b95573cd6d5","81757bca5afdb109f23b2b1ab2e08f434f626af25e986d2585973e2409a82e36","2f35432083547a52411b4b8128ab118601abc6a6e158a38894add0923255dc0e"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199173952 · entry 108e9186e8c5677a85d2…
Expected log hash
3bc66074c7b0a853326bf5ba0590a111eee6455dac5c98c791c22eeea9a48920 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791689192448","kind":"published-quote","locale":"en","page":"brand:publuu","quote":"I especially like how easily they can be adapted to match a brand’s visual identity","rating":5,"review_date":"2026-09-28","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6aba282936dc19b3b765edf4","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ffbc979c8901…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.