Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“which is just what I wanted”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
35284e7cde7912d47feed71e09e596127371802159fff98d274a56bf148835ef
Signature (Ed25519, base64)
EV2gKPi+mCbUPdJh8BL6WLegbKaTwqpLZ+GmKNa4/RTV4EPuhtnRoa3Wxp7ES1dwm6njOEhbfYO2w5Eal4i/Dg==
Merkle root
8b5970f4b146530c341d90a6af2810c5e81de90ff6866f5f7ab1feb7b3b58339
Merkle path
["352749175c5e8547dc574dd967f697486432d6e583f2a37f76c26902e73ffeb6","9a333ae7cc7ff57c9d33eb5c90d0b5ae834547ecbf4e417c120546650f9e49df","394457cb42b60bd62bd12c35215e12f8e8b0e12e3d207eb77ad1231271ba3ffe","15cff07fd0119ad96340521746147cd2c99a6d9f1303be1c0807e098902b47a0","4625ec746fbda8429c2d5f2e59d2b6aa3055b4181275d702bf0eedddf08e9f94","0f52b77c903193cd75e45bf50e9a88e4237a8a234c34f791adaaabf3a1ebebe0","97bd0d5d2e298b63579cc9bd246d59b9954058fb752b40ad9f3ea2f3164a0957","a291e7b944d511692dd1d96709a1462dd140c871aa203ebbe1f848b90e22a95d","11d22511b7ac3b9fb91d3f40a4d9db8abed624819643acb04eed275d6bcf42e3","941d4d6df76d1af2aafb3154256d7fc76ea56614e6ce6ff64dcee61f9c0edd46","5bf7a549121f4358fdd85eb2bbcc52d9c94f57fe7cb9e8152a2e562c4a1f116d","a00ed2756c4b4eb1dd73d63cbfd7af966d3723837ed7f1905c174238a43d794f","8b569dbd35e16a3cf6284fcb35d07452e370b6f363612f06f907e8dd9c1e09c5","e10016342536fc9141a66bbc7dc7af86f923fa1702e2584c59b9c89c4f07f20a"]
Anchored
2026-08-16
Public log entry
search.sigstore.dev, log index 2483496382 · entry 108e9186e8c5677acf0c…
Expected log hash
9e156a9df8edbfe61e2aac6bdc3033ceb5ecaf971b297c4e0a7645214890c65d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1786848988221","kind":"published-quote","locale":"en","page":"product:relai/app/en","quote":"which is just what I wanted","rating":5,"review_date":"2026-05-28","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a17f17df17685c554d4e3c9","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8b5970f4b146…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.