Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The importing process of transactions was muddled and therefore never felt reliable.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2bac0700f3ebd2a505cd3d62059e1ce10092380ff40a8190e6bb4b23d612d5fc
Signature (Ed25519, base64)
pIaA6/L/YLn1a9g8O+iSnc2WoX+XJyGZ2D9AhnW4PbIv3+58v/NeabI/7WNxluOTchCHkXdkBbkNdoWfKu0eDQ==
Merkle root
2722cbf3688f456d398c2c349c50045e96cda26d0251a390f403bba716d64c3b
Merkle path
["2baafc92a561654984405ed7e4629ebd63838d29073cddc79651d78aec11b6d2","f4b244cfa9c4e1f368e42f61bc6d09c4983d62b912044362893ade7833a68d5a","56da75c3787fb573663c36e55ff5674888bd84bc18c597caf3a7e6aaed4d7f03","5b3950ba47d806d18fa671ed6a3ad590365202a16ad4fc820eb544f413a3a79f","f08fb1ced04631d1abe5c9735a645111b6d7512a54f134bdf53ab0db39e2d7a1","21f477ebd1c130fbd77263d4a57b485962c90d6cc8fe7ae59b9670c8de76d83c","f8a33310690f09dd8f766d1a02949d6d071b626ec153532781dd822d77295b44","25fab412687c7f69d1c6673223adf2d9402c2b3c7f918acb3a5e83e981165b9b","0d624bfcdcfec5df0732b13a554f8dd433e2e6755588d20b25186550409e59f7","03671096b251ca65e7ad76856fc7e6814ac9ca3bab072a4c49efb1c634cfdbf0","6deae8b9a98015931b54e28e4dfd6a398223a25c11c2cca92eea90102dc27d44","937ccf716598c310ad94912d78036fdd767f36111c011e345664249121f46a8f","e17aefbd7b422ad270c6969478edd518eb38d3eedab10292a53aa045165a0e2f"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3668680919 · entry 108e9186e8c5677a7c55…
Expected log hash
b9da8ea83055b2674fdcca0c2d48e6dc1984e46d36af8cf72ce2f4d2b7fd0005 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793706705310","kind":"published-quote","locale":"en","page":"brand:xero","quote":"The importing process of transactions was muddled and therefore never felt reliable.","rating":2,"review_date":"2026-09-06","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9dac15ca1ebef79876fe8e","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2722cbf3688f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.