Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I ordered an item almost a month ago, am still awaiting it”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2612347360

Proof data

Record hash (SHA-256)

33500385114dd1de11d4cc6dba7790b8d68e99fbd31ae9fab82bae743ece2a93

Signature (Ed25519, base64)

pCHczH093PBb/H1x4GnhUQEjHxc8G12XU1oOBZJtw4Gs2W2PzpvQlhmDL4Ny3W3fXNNQkOY5LclK3o7G2FIYBg==

Merkle root

8f6189bb14c654a5d372a228199718ff564d604464d9ffcf8d8c57d2f8172964

Merkle path

["3350ff5228d98cdccbc3b7ca69720bc6c2c3bc62160138fffdc6afc1f4af8279","a097701e74d8181792c9d62f6807541750079c168cb8ecadf0df70bf2149e886","2b1e3ecd6e42d7e32ac2b7ca70956d92213ec5b73e6330c8d2fab60bba6dedf5","acf75c3c5d180c279251bca5e5f58ef18df06e8b5cad2715ad4fea787f2b7f98","e5384d975415dccfd2da56a4cd970c3698fedeb6f791c6ba61d94a6f94f3655a","fcb1d266e109f1515e1aef7323e53c4eb34fb1d0d952aba4503b439d612529b5","dedf8cb07d193e8469f3d00bbdb6f6f559c1a9582476ea6c8913e9bcba02ce3e","82c540f09d3805d936cf2a6e947da5c984aeae933675154531b6bbe1271b9bf8","14261868917bd4fbaa8bab18a2dfdc12a0e760f2f7c98103b1ac65f763a8dfb2","5c7410e7cabf196da283df19080067751461ea7497a8156b2883bf66a669a790","61413a936cb278ecd9a1c0096949382b667cea36082115c668db44cc29ad2b6d","cdf6335a0cfae0397de522c4078648aa637172bf8ef19a7b4d2d938463cbaa65","2f4b2dd38815b95f5e45cf51f44ecc0127486f5a8ffbf901ee4c97faa3826019","ca0eb82709b8721be19953519075736e0e9884af9a0e7db695d54d1f9882c40c","32e069a2f4b0287d6e635104478f1ba230775bff6273abb1d5b04830933b2725"]

Anchored

2026-08-27

Public log entry

search.sigstore.dev, log index 2612347360 · entry 108e9186e8c5677a787f…

Expected log hash

8887b1619ee0c81e58d4da852c5197a07ff26c69d495e7acb0423596891597fd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787799389869","kind":"published-quote","locale":"en","page":"brand:fossil","quote":"I ordered an item almost a month ago, am still awaiting it","rating":1,"review_date":"2026-07-22","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a60a808bcfe77b8d0e115b9","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8f6189bb14c6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.