Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Overall we have been happy when using the software”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2657725656

Proof data

Record hash (SHA-256)

322debb2c17932adab0e1533f92375d60b171cfd892ffd5200b5621da41f3b7a

Signature (Ed25519, base64)

Apy/pEZ0z/8tVZLF8S6/dcqqhG7GZpd8VYblZVDLm1YkNrmuqsYvFCVciNM7etDBf1cBPHmq4vSKGDBY+puFCw==

Merkle root

d019a962265fd99700bb41421c12bf721bc431ce9725f4e9d547011775ab56ec

Merkle path

["322eb11790ef072a303589bccfeaab76d8935fbec3038845a5771d38853dae91","dd506f9431e96dcaab997e64c3e4c951bf7dd4dbd60e06fd40dbb7c976e0baf6","78ae4be6ab553db7441e988211db3060a5becd77d65c7f00f7f1b7b68d96d78d","1209d661421dfdae8ee26e817e0b5469f5b65c963603c1a103848efe4aefcd1a","dca940aafc815b0796b2c4db206ce44b7d4b78c3e65d4da1ba5d3bed63d44dad","6c674b1d7686aeb6ca84cdcf17009e335198412463d9f4840caaadc1e843d681","1fc4ec3dabb46dfc9db87e8447526cdddfac3cad04542ddf2bd762e22c26678c","f92629e4c48fb1a0efc2c13baa648bb7bc0dea8f29ecaffa08111f70f6b42426","afcdfef3ae5f6103fd398c54b7654384bd67071d694303cb1520ad892c7094f9","82a26bdadc24434280b948e2a6159c7b7ee99acf41155a0a06e47fff77047705","10ab18240877afbf1ee443dc8a345e3c36d40eb842fc0c4a1df94ffd80cc0622","98083d29a9180d39fa47091bffdc6d1b49b5901b294bf1dc64307e11f2779780","25df55d598b12079d620aec9368360c954a6b164b21eb3ae970d4c2a7a6d9ad4","65b176b4a433b701cea4a24b83deb2fa9ed09be9f26f9fdaada87e8434a57f00","a28f44db157d986c9333d9e3edce8ce71060ce7f7d8f4bff70f57fc26d48546f"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2657725656 · entry 108e9186e8c5677adf65…

Expected log hash

b4666dc064e94c6d0ca3a2e9a0c5f9ff5cb70ce3ce9e0a74343a10c712c15a62 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788147462663","kind":"published-quote","locale":"en","page":"brand:pandadoc","quote":"Overall we have been happy when using the software","rating":5,"review_date":"2026-07-24","source":"Capterra","source_url":"https://www.capterra.com/p/131735/PandaDoc/reviews/","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d019a962265f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.