Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“After nearly 3 years using XERO the bank feed has (6 weeks ago) decided not to work.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6f9a19ad8b5dc49d48abf40be40f247717f4a0fdeda46fbb36a66feed5663168
Signature (Ed25519, base64)
sn/3NNzmXcfK/LIYJVNG23FeWdv/efXZBTzHxD6yaJcljdHyGawAH0ScAos2uSHi1oM/PPp5CfhZjQjwZQqRDA==
Merkle root
6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326
Merkle path
["6f9c3aa4fa9b8c265558697f9c1f47af273905503781b38ac46d1a3de5e5a345","22cd6b9f2d83939a02932b1804056350d73ea73570adc0635c3d84ad03171b18","7bd541ac8b7adffc3bb4341e49469c61fe5d974d2518241ba8008d4b793ad441","d15bc06984af76c64fd51648d6ee140d350450862d2197e31feb3bf012146789","2159e63b2cb7e6c78a963b8398b865b38beb29761e57a7e30edf5ec1dc100ed6","6b67be68bebafe009db0e3145756d4ccd1f2d6a10d6d6512be3efbd92e2d5ef7","f3fdc1541a675a3f9db64405b77a7a5e69b07d5483410ce6c56074e639755d84","e506755bbd13c75744e3b4d4cf0ff516d72da578f17c41d2343ef457a7d80dcf","ec0f89b5180cccec1362db08920191d71754728d134158835c8f28e157bddb5f","78bb1225eb2c030d939f956f8f4132877c2f72c7398acedd956f9509fc953fa6","94ef25e587448b4297c174c00422e0693fe48799207d7650c57529ba6af2d4b2","f093c8b1412e3d74354ea8b22e9fc3c489e9cca32c72cf25d4490d167d893c7c","43e340826c4a804ec6f5908b8b1b615e9056e8f44741be501b225d60c6223909","d55f41ae09ca42c33bbe39db949f63edb982eb2698def5511ce57c4f872a5c0f","6036173d1fecc6618a44f9a6eac2357cbf937f65066abe2621a2b8d1580705f1"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…
Expected log hash
9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791346951310","kind":"published-quote","locale":"en","page":"theme:xero/quality/en","quote":"After nearly 3 years using XERO the bank feed has (6 weeks ago) decided not to work.","rating":1,"review_date":"2026-09-03","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a99ed1d07ac1977c5f5c503","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.