Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Created an account without my consent”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3081458408

Proof data

Record hash (SHA-256)

35403b178b529b13fb3e1cd5aa4ab7a03632a33004081ecdca84249eed4383bc

Signature (Ed25519, base64)

ngxeXSLLJeheOhZtbTM1kVyImBXlViynz0YAf9pY2k2xVxRxXV86XLpEyBDfLnqfatiRJZru3rZj6NMlMu9cCw==

Merkle root

f2e4180d5a0710e7663a4b79dbb50303bd6f86e3a2b406f14001987f705300d7

Merkle path

["35400d0fe3e1cfb4c6ee512d7df7ffb05953d8e6ce08f2be20cd645617601ad6","a7b1946879bbb1b19b83260c28a452007cda997dec336dc63abb022659c1b88d","13bc4268596c7f5300ade3fe5a41695202ed8e865e840d2312d2567011fc346e","0fb7abb1ab837b3cab7c9220900bbce824c00d56e39beeeb7085f84d0c75e40c","5b73858ffea50a1c39a3957d78f07ae39b9da70a45ffa434a732a4a40e78945d","10c19bbcb1e5c4a93a63564022bac28e269f3c3b16d782a1fa3a53b61784c46e","257b56260d21dcd47cab8ae52172d552ffd651544979b78400be75f1dae90456","a4a70bb12620c56d28cbf517a75595ba15f8efef8ccd783bca61122019c073de","a7bddcc7a3346d2b3134c8af00191a127349d35019e0266983b0d258d0793898","cd336cbba10dd5cb5bc06c48eecbf75070ada3548c9d284131039800d1ccaca6","168911be385354c78db41f4fc053fd8ca7a28deca0d4310eb0afdb539c8b03bf","ca76c1ec7bb54dfba0dcf403e68beebde5ef8981308d5decd9b72a7fdc4fb13f","039d1a9733830326fcb3d2385978534fb925aa34aba793b08df59fc23cbbb411","a6e8e25a2ba90cb0272e9c8b0abe3d0d6e1acdfc88815c674818da4404f1095d","e9f01260bd0385751f2505473f49304ca5856588aee517e499b7a694c94e66cd"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3081458408 · entry 108e9186e8c5677a9490…

Expected log hash

083ecc94bbb96677ba7c17fb105e7b1917457374ba5e9cc48c412762603877bd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791172602574","kind":"published-quote","locale":"en","page":"brand:nextory","quote":"Created an account without my consent","rating":1,"review_date":"2026-08-28","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a913d7ae5e3f647978f94d2","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2e4180d5a07…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.