Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“useless features for small business”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5040170ea528069d915578e357d96118c2d9737e088912042b9db3fffb8f572c
Signature (Ed25519, base64)
CqXmxjmoDq8JkhKucj51NbQyjYfI1kYVrRgVHQQQfR1bNk8Df4q+lbwQgnSuxGwq39uqShXQ2jx32iLrmXG5CA==
Merkle root
a893faa173c6b378c8d050262e841ab57fdd89b71985eabc0906c40abd5b6a6c
Merkle path
["503f90530e7fc08226ba3bcacaeb2d2b4358214123a9466fb479a1f362bba8f0","f3794d996849e56582151b74c7e526377452d11b47ceb1961f327b78762f2520","c482f638f5af2717313337ecbfc920ac533ed11be0a7d64342a1244f90e4e4f8","299ffaec39303488bf0a5a54380fcf6b5209a813dc1e3810ba4a18f79d9c3484","19cc78d50b7959e7c3bf34c9d5708ef833e23a018f781c1d3ef102c56bb0a10b","b6c6323265601f4c10fcb05b5246736c6668ba53fb2a320f0249706931b43741","bf2160eb2bd28785c875408d5289bc67c99378590a405c296b37d6d253206757","fea12cc98b0b25af0f9a78bc3f67f85c499792f9be5ca47848a3bdfd9e5941bd","f7a033a6ca37757129f9a28f765530f7d19ef4f3d2be8ecc48ef12254c50a953","3641788ecdaa263ff8a0454951c885b33d583f701da80b64dba68fe5f0ccb9df","f12d0d9a0de88d08fdb95b15e81a8f785590687c5cf8c9c55245f73a1c17b20b","4f59f4aaf0240f47bf6b7b597482d7f0ce33f9965169e550832697b23b630fed","34d17d8fbe0805298b779dccbf4c1befbc8fd33e42aa34df809cfe1ae000a274","71601cbc06cc18d15a7af93021ee7957212de37616a4dedb4252c015daf6350d","5153df72155ae00831ba1e4416296382c39280ea82c989972042c066f445006a"]
Anchored
2026-09-18
Public log entry
search.sigstore.dev, log index 2882354328 · entry 108e9186e8c5677a08a7…
Expected log hash
5510a497abfe2e680a39c301b0d905c2a575bae0a1f389fbdd7b86babf05240f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1789619628558","kind":"published-quote","locale":"en","page":"theme:xero/fit/en","quote":"useless features for small business","rating":1,"review_date":"2026-08-15","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7fde86a85822a9cf451155","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a893faa173c6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.