Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“After nearly 3 years using XERO the bank feed has (6 weeks ago) decided not to work.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2a8fe703067d2e8bc7a10dfcb03b18e384e96a22480e3fe04290836544f349f3
Signature (Ed25519, base64)
suQaiF02uOZ4rwitP51ml9xg7la5QGIZE2U98PuisMBtQJLgVePKI8F+XAGJtRJQuHX85hCBup3mVY4RebX1DQ==
Merkle root
6198693610fc101ebb82aa1f9c089f7146b31caebf70bcf1f70b87596a2871e0
Merkle path
["2a8a93b2f20ee0da007c77389cfa0a4a0c77387cb7d9d0103dfe5656e7c7a105","a567dbd09583ad55724ef0c0699153ba503744f5301b2469756ba91924cd3541","ae3378198d0ab4daa6da92eb1157a3f144687fa1957fbcd2102170c83a502d68","4a553633d03cb40e05a26cfaa76f540ffcbabb582e187251df3d9972f0dce885","caa0dfa4d5127537febadc0cf4f926421c689a57c22545c1d735e5aae9b8bfd1","fc06a6bd4dccb52167a15488e01d47e8bb621cfbed680919c4b458c1841ae0e2","3e173912eec78d70bb92f61043f97f533daa0201f5d7dd1a92ad768f70e8f470","1bd494d6d916503f8136a01084693fb25adcc017126fac5026c6a646261b004f","5478a05933ecc9029bede38504424e5e4bc8e86a7ed557ed659a6ea192e14c2b","fc04902b7c5044c2e0ae0d7c96cb9663ca35703af7f9375a666df6650a77fbe5","15b9eda7950a79a0e1084ae19d6fe8e1ef8e0b5f169fa248d7c787b0a9eaf5cb","0d9e6ee6936356ae6c967b3ce2cb0e42d3ff0d06b736c006024c56f32867114c","3eec96d57c7ea7d1841605fe068da41ba3bbf63a30709a21a9f81605afbbb44c"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3667254458 · entry 108e9186e8c5677a5e6e…
Expected log hash
d86cb752bbe06d2c6cffdf81a425ce2e1f7c967ab490cd5b4543bc4a2cbcf526 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793702805047","kind":"published-quote","locale":"en","page":"brand:xero","quote":"After nearly 3 years using XERO the bank feed has (6 weeks ago) decided not to work.","rating":1,"review_date":"2026-09-03","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a99ed1d07ac1977c5f5c503","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6198693610fc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.