Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It's also totally inflexible.. customer spelling mistakes are impossible to correct.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
44400764d9dc7d02aa8a87a7948de8f5cd9d464ba616fc813ef880062a2c64f7
Signature (Ed25519, base64)
WG/kO+RGab2efjcTWwjEht9yaAcEAtKRoC5MaBzO0syCDTV4YmID//RanMg60a09DCLyD21RO1vlRPapwZUOBg==
Merkle root
6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326
Merkle path
["443f1024cb87430ad2f779c67817f4575955ee99cea0a017ad7c0721f4868b0e","de687a0757e95de2ccdb5fed6e4330c2e157263e50d291ddb4e11014f771c2b6","d7a7a1ea43c5cef21d0a5e1d2a7e285aa746e1218c4182a9e45c20b4ccd5355d","39180ac851f4250a449a9fc0a3953fad3f860c99b80c36fb48843132bad544b5","f60fd20bdec0cc19fd7c94679a33e0aeb8f64e5b3b34499454e2259344d3a3e6","0d2a7db0aae5e5a067a079554ebef8fb5d4243cc54029beb9dae494212857bf2","bf31de3e3be72ff2f9bc1b918b64309de00cc859c79d1b174428cce6cdb15549","6526cb7610062658cf49a7438e03e456f9e20791d8e26e62dcf85b4f37d3ed8f","65d3489175f5b5d9153a5c95e9253c81b666ebeec815f4863f0bf7b4fbdaec1d","4d7d33dc262b0838d7d03a328e05072e509867e1c5715096a29aa7e47c6d9c62","541ef37d75065c425f828c4da38b7de1bd899be23c90801ebd79fe73540bae71","0354c610fce4f56066dbd09daa9aae97d32446e2977e34b7313d0ad02d98a0d3","1eb8d1bc6a34f3540773b4d1e91cbe51b40cfd5c56e13056e24402db6850db66","4c2172f51b2eef852eb0ea0a1d4f8bb29ddcd3a6f382677ca6a66af43412dce2","6036173d1fecc6618a44f9a6eac2357cbf937f65066abe2621a2b8d1580705f1"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…
Expected log hash
9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791346951310","kind":"published-quote","locale":"en","page":"theme:xero/service/en","quote":"It's also totally inflexible.. customer spelling mistakes are impossible to correct.","rating":1,"review_date":"2026-09-08","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6aa024f7bb446bb2c081f460","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.