Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I am saving £30 a month”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5df93a7ed405aa9f956ae7a8deb260ffe74a8b15adfe667685c2ce9a63d2dea5
Signature (Ed25519, base64)
NZcqhWvYyzsT0NGqTLjxRuW4s4gAvxJc0YpTuvh2Q1rrNy1/ECvB9yjCZfKoJesD+XH1c9aIe6t2WVOPKDrIAA==
Merkle root
ca3049e83faa90e23a8ee728d82960c74b9da8080000e4c92979853b767b75e4
Merkle path
["5df9e6c63e483b6785c7211fef34bef323b9f5f2e8b8ba7afb77b1a690b96102","0ca8f8dc88d3cf3e94bdd94a8e6a4048be46e449b4b54ffd27285cf9a4977278","15f5c9ca99fc0b48157cbe93f3c987f308c5236372025f9a24d5f3b75f3d4496","243076282a436ed51437829389674aa5619e1a5a4c578778324fff6a8adbfbfb","1102b2a547d3a7727d1b928caf67fe9205d8bf9f01024114dfd0640507446310","daa9004f9d9794007392db7536d963fcd002a1cf4740d61cfe79d87dc67899c0","b618b4f440236d2ac953b240a2354af3705619072eb0f8e9d2185f1a84b6ce7e","61038938bcfce81dfc97a360e6a2c574d87d5959c04878a5c064dedd0246e71a","718fa4350f4221771ea9e8dc8e4c43ed3213a7db2968ee18e92b82c3cf6b2c39","6ad67d7bbb6b9a93b13617011107c7579d10e87ba381f877afcef4eca8e9dbe6","aaeeaeebb6671abcd6790fe9f1cbba549b045d56e5ad28e55767265170693ec4","35160e899989ab55b338117e263269e5952feebe8ff14148b9712ce076e959e6","3eed51977edad6c2579b7e509587049321fa77487298d3b73535214036c0118d","7614ef067de1e21e5c4ed10ec802ff07f79b9dfb75186edc1d9abf343905b9c9"]
Anchored
2026-10-15
Public log entry
search.sigstore.dev, log index 3258859570 · entry 108e9186e8c5677a8fb5…
Expected log hash
37382a24206a9b79ef105a983cf477ccafc4b4430b1549876c44fbf5fedaafa5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792034893828","kind":"published-quote","locale":"en","page":"brand:xero","quote":"I am saving £30 a month","rating":5,"review_date":"2026-08-07","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a75b96278ef28a253fa688d","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ca3049e83faa…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.