Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I didn't hear anything for way more than a month, despite chasing”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
35da90d20a706e8fe855be8b36fa1ff9761f0e94f78e06e80006ae4c04466446
Signature (Ed25519, base64)
lOS6yFxNhpZix+yFtOZ/oTSl7+RM8T4f2OP5HVJ4I6KKid8zI/rA6QHXtJd6gSw4wyASB2gMYvzTx4nDN+2aDQ==
Merkle root
d124e5a2af562a6c1905db0373243d4ce34f50e6bfb68d4c04dc573a8e684f0b
Merkle path
["35e4449efccb2f8672f5a71946605290a013771c3c5e59e0117c3dab08dc30a4","ad5cc3d020d3d80923b1a5874b1091afceae4d751bf42d527480fe7447b2e71a","827029d0500d6481605b2d8b9a78c44dccfe241511c44904f785f8d4eece90af","7edebb483b80da2397b298f9919a17f6fe655d0c7efe15540daaeceeb2b9dd20","148e163e31ed8a6b0cb1a3acff2d4bd1ecc1d59e5f651b8a22e82ccf2cde4656","4b101189dd7cd3c21cc460961877d1e6fd35d422616edc07856d8175228aa8bd","015a6851dc681819cf4786d5b48596821737db75b2f0867180ac12161f365eca","4e2da071dc76ceecdbdf0ccc29551e263029bb3322491fb428e72fd42fdcc6a9","0f49c4ca523ca73483a37f29382b5b4088ab4a8f7402c1a4a8b1e7acfd425dd8","43b9b4862fa76137dede51ac89b079cc653ef948a44c4a2de94b29e0f23c448d","9df83c589920336606ba8da617c5f50e84013146ed9dad230c7c289d63a3d3d1","17a0711d1f4ce03469bc16d018a0c574adaf1d6eb90420870710f52eafd8ce52","5b3b7fee11372cbcdc424f34ee6599f27712df2073f9b7894a6c2e925293b815","b287ce927184f2a91925f933012c347e3408a38af240311834bfc2de85b81b88","ae0a60bbc31eba7126a560c1dc0c88972f060767803fd062a22f4d1b64ebe8cf"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2681975448 · entry 108e9186e8c5677a0099…
Expected log hash
a6874452aeddf02ea2fd29d707bc91d5b5c68aa3036290fe558d8adf2a5f0bc5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788310340973","kind":"published-quote","locale":"en","page":"brand:fossil","quote":"I didn't hear anything for way more than a month, despite chasing","rating":1,"review_date":"2026-07-24","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a6357f733b9bc059c3676e4","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d124e5a2af56…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.