Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“terrible business practices”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2621349433

Proof data

Record hash (SHA-256)

3aadbc0061c36993cc6296562ac48a5ff47113082244ab7fd80108620093fc88

Signature (Ed25519, base64)

yaesCBKZ+4oqp5Gw+4qUMInwHJPCz2AehXtxg0z9H5xHz7txbGUMdKweFvexfzhlx05e9rg5PK0vmWz2XmV1DA==

Merkle root

52b348c94f3fdce59db013e2d8b151833bfb9c02163bc60ea07ad4321b96c806

Merkle path

["3ab30a07c151349e5b63895f30d625cad9796a41221f462332e42bb9b1247eb4","d5ddfe71a0e82d42e8c03a96937156a031a28710cc3ba602879ad18b4b7a42ce","e795288a2535020dcb39d428783ff65f69b2c499ee5a6532f0f3b5d7b23c5697","ec3976e61de62ee8c90665103eaf5545e27ef1a1fc0f1df4d0ccbfd2552da6db","378d3831a42248606fcb1b0de40d403dae895947495b138e8b0107e9490a7c8c","ceb027e65421bf363f018a76af0a5cf59835157000b4c67e72eefe237580057e","9f06fce40471e2206f4693c333a7f825cf2684d4cf5c9ba978dc414ab65471ee","14166cabb05a37f89ded65ec5b3542646a153a0afa326eac088a1fef3fa69e44","b17e918188dc659df74717301058fd20d1f0b3d187e841b4da99a84a9de45cff","3f7ab38f929e08a4c6d2c065f78892faad77deb8ca3b302407ec23a4b4f31144","e4d1cdfcc5673a291a258d177b51d09d268d2dc45bda1c276ebe808df7d3a707","fbcfa98c2155f53da7d666673bb609567bb7c867fd36699ba0a3a0d69927a785","6de57918f6ad07ca08ca7b4b10133e936b835e12d240b6ef5598ccfa7fb8bcf5","775de910b40798d9f37b75d39be79e50770b797482dba1aef04bba70619fff3f","50b301601f25f58ca39a522d1fc14c87ef92ff2847a542557119e06fa2bbb889"]

Anchored

2026-08-28

Public log entry

search.sigstore.dev, log index 2621349433 · entry 108e9186e8c5677a91b8…

Expected log hash

c0c478568c16caefc62b4dd151387aace853e1d48501c09aaebf0c1fbe3c7cab The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787884935070","kind":"published-quote","locale":"en","page":"brand:pdf2go","quote":"terrible business practices","rating":1,"review_date":"2026-04-02","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/69cdbdb6327793a50cb8a1f6","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52b348c94f3f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.