Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“John Ekilisie was incredibly helpful”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3273084324

Proof data

Record hash (SHA-256)

6301de7b71a4fb72e43ffac66911cbb8924e2d71a6008874ec669ce42bdb3040

Signature (Ed25519, base64)

GN5Y94QwFoDq7spgyaruXoYkFt915vH3tfFlY5MtM81g+m9OdSprazqq2+Xdoz6jgqEfjut5THkYd0mxhQw5Cg==

Merkle root

4591ccf5fcdb01ed421243d02df5f30203ce391c077d4ade1ff5ee97e69e252d

Merkle path

["6301e19e1e0929736ac4331df1e45f0700517a91d23161fb7b96ebddae79cc07","e3ed93097d8781c39a0bb2070610a50d5c7e78fb9b8a8d3d39dd44de2b9e1a48","448cdeca13943e43d7ea641f79786654bc55b737b5dc9caced9a665e8a437a73","28d131c381d53a4657a7061a9a4b51e00a75c5ec9f1fbf2cbe6d0c7aeb9432b7","c492c6a7f32af7499b77585696a44f8299cd034053086c972a736a9bf8bc71e1","54068d5ec5eeb51a74daabd4968242a88f57661cf4ea7967c94402462c1064d4","dbd3ecfe4aaf08e3a1f820bfacfcbb71cb27effc5a053425c28b3566f309dd80","4d5f7d9f861285707cc68981c3e3176830fa72abd6cf9134aa602cf72cf0bf96","0d92a7574837dde3c538e4908419595331f426673bcb225ac5018deb959a474e","d4ab2dbf81233f75d56844f8c9e35067e353d6799fb5cf19b72538d84cf3aa73","56d0cb2e44514ff61c37fc874aeee9bbe14a6c6f881656a90e54dab1f94afaa8","71deffdc3e60d0983d04bac22af47799e28ca987643ad6dda198476b887a69da","d52611af45c7ef524ab63e970b046a1061f8173af77bce3332bb854291964d99","04789af0aae7a52bbc7d5e129e675a1c89df82999aa606ccdd23b89f718c4ff3"]

Anchored

2026-10-16

Public log entry

search.sigstore.dev, log index 3273084324 · entry 108e9186e8c5677a4edd…

Expected log hash

52df3e0fd214b96d6c701f5f337408916b7566fa39826e2404f759c290be1eab The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1792120358245","kind":"published-quote","locale":"en","page":"brand:xero","quote":"John Ekilisie was incredibly helpful","rating":5,"review_date":"2026-09-08","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a9ff6393e343e35c56832d6","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4591ccf5fcdb…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.