Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I received the product the day was announced.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2684302363

Proof data

Record hash (SHA-256)

2d4701244d7df59df700c2f1040e102c35cd7984862d2f449efe3f036d61ee7b

Signature (Ed25519, base64)

jnalQVEbOpEvUowy546dZRNOt9KqmO/9GpVjOtlPJqYXNoQ8zzgm91PpYDtozWMv0HXUG/BP/wLSNLV5tYvvDw==

Merkle root

5e3f2e41cc1fd7787192ebeb079af6f990c775b2053326f968115de8dd824e71

Merkle path

["2d45b502d9f461a71a2d825072f5e9ccac7efad1272264fc398c0f4d4978fe6d","746067f90433eec86a10839e809d93c9c56d230f6ada1acd058e92d36223d870","ce1d810b5f1e0eaf3ba7b0389a1b28bfe881fcb81d47e39a7d5818ced2f09e23","ddaa43395d63fb9a6a3a56d6bbd10156c9808b620e7d54e4fc86ff391b0e0e7e","d1c317b18b611927573e90660fdc4e2411108b7066a1c2b070995e441519656c","d9db17d982191b4479c6833e39e612b7c99818001fb5e6d42e1aa7d882234e6d","b1614d416856c405bce9ede085314ce3c439a6da0d3ef921a0177bbc0ea0c54b","e77e151d4c970b41f6f554167ee8e9cec7ca37611a65ee2511c8b91c6aead713","e858dbb0d99fe13965378082e6d4b5f6ccdfdb284219d66a3bc64b56a3304c2d","7befddeec532f52481bb75e51b4e988a96758062159932bdd09a20578efd8a41","1b9fab78d51337fba533cf6c047a0937fc7a456d73530a7cbecd5086a817ee03","a2f9977b12f573f09aead38e62e17e067b16fe144adb1d1c3a3210bc5b2794ad","b571faf3453f3039b38742c332dbcb628f2c1dfbf5ec857c3d7769d1da16d67f","2afb6d36d3d2375210a57a6488ab98a278bb5bbb8e375833e605929207041f4b","a4325d4ccf36fc7ceaf4f8f3c2f4337a81e5e52c1c81c4c2185006d4bb2f79fe"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2684302363 · entry 108e9186e8c5677aca75…

Expected log hash

ee19ff36df511a8edb29d6951b6df42f660405614fb2aab70f8340010708e45d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788336966085","kind":"published-quote","locale":"en","page":"brand:myposter","quote":"I received the product the day was announced.","rating":5,"review_date":"2026-04-13","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69dce048821e4c5a62e2ddf5","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5e3f2e41cc1f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.