Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“integrates with all my programs and apps”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3198797320

Proof data

Record hash (SHA-256)

3781cf1e4c060b2afcfc1af1a3cfd6b8bed93de9bc0bb5cc6a831868673ee086

Signature (Ed25519, base64)

yPQeD71QB0m2YtmTfTg+AgZ1TirI3QEo4ud9hV8bOdMHXSiH3fjJKfPBr99dn+wfaJ85Rgw3/7VSGflju2NQAw==

Merkle root

199738dc68b66dcf66f6b0cc77e2cba74c3bfda88989684620837b4c4e64818e

Merkle path

["378128146b08197a89be03b48d144874b19baff74b19d763c86449f4d80ca7a9","f3c8d0a6e47e6c920a3046d42322c27b2970f18e058e8e3741cae393001e7eca","7dab635c522d4931f1e2863057f10665105425dec96a55103757eb3aef9a46ef","d51c482bdfa9877d9b497a2bbdc48c2a07fc98efc3ee891cd8f56e8c5077116e","f11d83ed466a4ff5cb3724f1ea062197aa0200bbf9718276f916b6ae17a12418","c7bf01284dbb333ed613de112677147bf1e07514263bad295b59847bfd60cf98","0e73755a871a6e124506ba21062c11abd09304660a9cf36f3d75822ae91b18b7","b8f0c9abe5b12334ff23feb830d0fc3e6049363cbf06e689418f5292a1a3fd47","f2427261bb1d90cee00b4d953b8cbf67a13597adadd11302d56d8cabcc8f6bb8","9e01e90169c58d0e9b8c7d14462d7d473e8deae3a1e49b9e72a0898248bc82b4","044d29ea84c64121195ee0232cedf7d4633096d16816562b08b68059aad62a3d","c2efc19050cd51016477281115d61ba0bc460759f5adf7f1bbe5ac7cd5d2bcae","89c2d1ad10f8da8a1ced326bfbd1f55882866fd705571bc337258b3314dad42f","ddc8a66e59fc8f0934334cf08e419f621290129e658cbc58d8ec27bafd90b0af"]

Anchored

2026-10-11

Public log entry

search.sigstore.dev, log index 3198797320 · entry 108e9186e8c5677a14ba…

Expected log hash

46227e67415cdf5b62c43420eb8b7a80b35acaa912410c2711787f678b77c9c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791687727006","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"integrates with all my programs and apps","rating":5,"review_date":"2025-05-14","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6823cf1f4336a59c8298de21","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (199738dc68b6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.