Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Actually horrible second pillar.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
32da0d933e50bc1ed516472a8c607358ada76611e56ff43d74fbb2276322e6f9
Signature (Ed25519, base64)
qF0MtJw0O1aE6qc/VjmuskEiyAEvUOaGBGmgH1hD/gX7noViks9XQpIJtRpwXAnWvOEusyH80W4NGnplBW8lCA==
Merkle root
f0c601bc37f52c70ded17f76faab5612e674bc087c8faf99b4d2f53e921c2b03
Merkle path
["32dbd769d00ce862bb0d487030891245866660ca95b19611870c2220447c2e07","4c411791463b68ecbd10f918fdaa36db9ae8e3623b2375afe8dac7ad91b61ed4","0444ed2a9d4659eeb430d38abf693136391a192986031963bd1ff09427808853","843228addfa2870e2155166eb2a26dd15699615bb8f62c97474b1037eb53c549","2d3794462e829c95850bd431b03ed9777113ab30ec46df78691333f79bff69df","1f2a16664313b893cce67c6e30b2f96ee9c46c4bb7d90efe12281d710e03c2b0","449d7248538326df5376283e22b32552b8325e41a931c74059a8efed51dfad7d","6fb3c6a32c267a41764c34d8ffae2279ea020147d5f276f188800328a8e71b2f","4fe9ec0978e08d2c438938b39444f25d742c4e40c9abb4f4075b745b7e881dcd","8b41793b05f1c4ca37a0419ca59060e0c4e83ede8ca7121a9f099c9f36f2bb33","11e6bbc3dae5992c06799eb70f77db853e61b805be65c323e1ff2ce6db3998b4","ff3ac0953ce63ab698ef58eacd191778c2c1bcd64cf9779f57d2ca40044be10a","810886eda93ce34f97556cdf71191d3f3178d01d873cfd117071d647c88d4702","ec79f032c08fea2de521a7794f897a556ed84b17f8ece659b547d74d3137bc36","d5f5465b6d70ec9eb5fa4b73b511305c1b686def0c98a0246e8a4e9838a04a81"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671768867 · entry 108e9186e8c5677ac984…
Expected log hash
bb91227cb78cb3334e4fa0a34a7640fc05bd48061b2bb5126f5713e7d64ceade The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788238642169","kind":"published-quote","locale":"en","page":"brand:swisslife","quote":"Actually horrible second pillar.","rating":1,"review_date":"2026-07-08","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a4e590e37d390a1d2e39507","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f0c601bc37f5…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.