Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Puerto Rico was excluded from the shipping options”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3398e9b7ad33ee1ba9e78ff7e465723b739dd2ec8c52d4b810e815ba51ed43db
Signature (Ed25519, base64)
4omLTIELQiQ/AWqFKKA8f3UBzoMHiaFx6jRJXr6uyAUIJR0KWcyU/cuXyerJZr0trGXEKkyBt7EGnAC92LGxAw==
Merkle root
a249ea91ed6d494b0d321c9d53d89a7bb9616ff6f558eb56f9ac9b7e3eba088a
Merkle path
["33919c1ff8edeb3f46f64b96dde5c870dc414bfab9acb4ebfd3d8692e500526b","04095c7b292f639758babd837eb3c7f6a65d2c6e59d1ca6ee5e1eaa11e9bc46d","039f77764c424cd87765c5cd6b58a9293e9d521f230889e59863a6690cc9816b","2c07d482cb96d817f9111e889ee088ab5023497df9a1301de699e967841a49db","0f93ceba149011580107edaf8ab7bcfc9dd82aaaaa31e995f19071cde1069be9","f185b2177c52e3abb248caf9bccf104798add7867a87c95687f67215a4c0503a","eba31a9c9ad42a17bfc3e350c0f7067661fec56651ddcc32d49f7e06418ef40b","4e5afb518236ab809da6ea97eb7d9ca70cc1ac5e14b52104bd8ee85bf85a29ed","fe70a47096ed06165b42b172f91a6f2c32b6cae0141269257f451923800d19d0","8730a2ad91327595a0c7d575f92147e4819dc08e6774b0e88f3cb1c5a073cbff","a5b69623af96df4c7518853f3a486cdf908c2bb6723c034e73b2f2c2dea75aa1","7e83b0036f56bdbad3ba0ea2685aae20baa2141460f046f1075c0f8c74f340a7","a13caf334f924b3a1f76b72f847967ab0da2b3b22dcd88cf3e85ba1b401a1870","c5153a29de53059fcdf4e9999712d92e644add9ca8c65cc5e8b2550b7edfa09c","281950cb809ebe3e75d0ee6e38a13b1a88e711d70d03b47950c14223d365015b"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3096409536 · entry 108e9186e8c5677ab1e1…
Expected log hash
f1740c5ce7036e4f36513fb4ccb4f6bf95b5dc879a1fb8a1f0778ef42370576f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791238940340","kind":"published-quote","locale":"en","page":"brand:canva","quote":"Puerto Rico was excluded from the shipping options","rating":1,"review_date":"2026-09-01","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a972dbeed309087e934fd1e","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a249ea91ed6d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.