Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Product worked perfectly”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2657230937

Proof data

Record hash (SHA-256)

38cd690d9635a7f0a77e128c1daccbfc0a4d7bad1fe5f046c90322e2879955df

Signature (Ed25519, base64)

yX1x0Rj/is5p+AQM+6TEHszh6YQVpeguqAkpWs9VuxkRcS10aJEvlNK5NGrOmalCG1iRJW5ZiI7xwr/Tefb4DA==

Merkle root

2915d94fc718eb48f67362a65d9a83b80dcd4c926c786eb2e38f4d8ced0439b7

Merkle path

["38d08d2a613cba7aea7aa767b0783f830b62d407bd086359e36474f39e38e06d","9168299abdac424e3457d16f60a7ca339247bdee4327428978c5a91aab8b72b7","b187eff4a538258d0bd6e2c1e54d8e4ee029e9cb6ba18cb0814343e39e5044bc","b1aacc98a5321003eaf7c6cb5d7845bd9d3470b8b030178f7e7fc4a6669ff454","c84dce7125eae41793ebaeb031e09132b9fd30d94d883d188f8ab25f01295f46","0e6ad686885572e454d94ff5f45f125478ddcb09f746151a3289ab26ca7bf57b","920a5d390f6793481ab87829b0757c3e860bc489e449e9016a86eddf792b06c1","107b08c1217408d53c5a5e1202872773cd0b0edbe54a5d4c7e73db5b69a583fb","1d72489bd04d4631abce1d42dd34ae10ca514015efa2b92fb1d8f834740fefaa","dbfe600e1e20099ac67a367f3a0c7115b91a9793cc8a5bcdcaa9fa8bb4283e80","f7487c2e22eead27ecb1a70c52a3c7e4d11b6b6c8b1d0e4bac0ed06ca686a6ad","b18ed929ae9f2e5e75dd61203060274e424f923cdfe32c2a74359282da4ee67d","5448c84b5b8bcd5fb137f966b2689de96fb00d271e969f9decbd30d6d4a26393","5b8a2081ec81ef2101256bd7209457c75dcc1be14257b40200d45a88003c0c32","1936eb7713ae59e20354a37b8314d3745433b23d047da205242414a6fea32b67"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2657230937 · entry 108e9186e8c5677a80c3…

Expected log hash

1d9aec1bd239e45b6e622f366eaab4292482e627111ddcfb4c651bb1e08e92ad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788143889053","kind":"published-quote","locale":"en","page":"brand:fliphtml5","quote":"Product worked perfectly","rating":5,"review_date":"2026-08-25","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a8d1a9a40aa778ef3b0b431","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2915d94fc718…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.