Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“My personal Email Address was suddenly appeared in their mailing list”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
372df96aeceacb2a711ccacbf6ddaf8879c9536c553c9ce8984d93e66fa1fe1b
Signature (Ed25519, base64)
IiIhMQsvGMt33duny/mjgOKDs2k3ALvyJUO21NtscvNl2R/ARVExqUFAFgJxtZizbptvl6elOvdN0G1G8Ku/DA==
Merkle root
1154a265a990612db5567445e00872656e7ced32aff0b18660887a40a375699b
Merkle path
["372d89a9993daef98dfbe2b54c12abcca44d0044258f7f0186ca78ed4b03e46f","47648ef90695c68e850463e30702f03bf7142b84a01fff565c94b998d0ce1120","a37145cce74434837eeb419a4e9f29e77246f679d82c60bd362c9eb434293a6b","264a5be2cfc0f1f56b237bad9947ff76197e1a390feadc6ae950c427fa47115c","57a31eb3797d34b5b4fe195e91ca49935c2e323d19dea9c7502e0f4b9d258a40","7c394fd9640f8b5c9ee689a227c105b4655aa83bc0c9b566da28070591e46c84","bd585f69ac6a09b0ccb4691944311b775277ad5f57fba7c722e6462279d19a09","b08fce8a24091199b9c82ebeada9c6e13349613309f1d20949b25884f98ef3df","65b80cd8d387ad2abbf6fbd0f82f2efda93dea62ba70ea8b655071e391934a16","f74f9d263a202b0f3455dede684327e96f456b9d40e7caf2038f186c05a6c8be","cb652c19515421365623e93c8f17f8749dd71f783a11cfceec8af6f2d3efec67","e0eb51bca6e68e490a806d99145fa323bed979ded5bce9406cc39bf48fc6cede","6d5115041922f2279278f451ada3e9cd256690b7258d9e789640b2b97919128e","6b47d1533765a8fe766882eb411a4cf6ead3b0e29c680883d52a550ee72264e8","8f93c563d7c563da751df1a0efbe13b6ce9bd7032eb6dd0a995c545aff2f5a1d"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2524110285 · entry 108e9186e8c5677a87bd…
Expected log hash
34efb4ec1aab60168b83ec62d0334b8e10d9814c0de0cc0d3569d176ff20bc2d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787152786156","kind":"published-quote","locale":"en","page":"brand:teamtailor","quote":"My personal Email Address was suddenly appeared in their mailing list","rating":1,"review_date":"2026-05-21","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a0f19c191c6bebf4803d764","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1154a265a990…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.