Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Canva was a little confusing to work with”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
69616edad236786e5c48ceb303621f97a52921afb03582412ed80fb4afce7ab9
Signature (Ed25519, base64)
Hnb64VQkKtS40P3j0pbaFAoPn0LGBxKe39WajLRx1G7YhWD0eTCM9HXzFqxc1y7cmOvjI2lXfUl+SQ+avE1YCw==
Merkle root
b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path
["695f6877c2912f3361f0b16b19f5779a4c296c1c1e92bb16d01813f99ffb6921","08df6ad1c681d5ae2e874f5fa0bc00308c142fd98557924529a421efe5626d20","5250d186bb301c29af4aadfdb4b991bc29ab11d1eb89db563b583d33cfe0dd28","988a89542c1fa84fec5cb67f1a9cb2ac660f1039e3e66768ecf92456e785cc69","2ae4aa641b374f03a24596946af948af6c2ce73a33eb2d0a14bf051f7d53fc23","a667045145ac15c7db4c94634aa0162397c2903d9684baeb83ec6c8f67c0a36c","b3477e07220904cc1e179d9545228421316cf77e8637e46d23330b25ce53b62f","5ac6b434c4159ce4294be2dfad85e7f5cd48f8f2ea756e6b7a5392830c876d14","614082cce46e089b895141432c7e9e383b8b5c9587e8b346194794f4564c851f","4e62e3e187beab91b7faeab06bdf20ff5e39411ee54aca3d9c35d5cc4f482ad4","545b9b79d36274706959a73e8ba29954913d4ecf22070b4e6b14aa0ea38ed93d","04087565ef2bc2296fbc1a825b280fdd722bb654bc60f0b5bce5b348a7793e47","7683d5d7c88ecec7a3b1a5734816ef1b47ef9cb2b169a45f71d75a399897983a","a87bd939a3ad0796a8d580dacb2c37af7f713a77a0e4e7ca6c95f21a1e1d62cf","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash
687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787134378129","kind":"published-quote","locale":"de","page":"theme:canva/ordering/de","quote":"Canva was a little confusing to work with","rating":3,"review_date":"2026-08-12","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7c783639835da0c8faa064","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.