Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Payment processing is awful”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
70fdff39d24aa70ab9e144ce1715643f09aae376b39df9fa469f341246db8e95
Signature (Ed25519, base64)
BtorwcxdEOeArBX2pc1tMOu6sKh+ymIxA2MaCPKsD1WtK+4D7I28prkMppHc9L0WZli7D2ExqvVviIcCmh9HAw==
Merkle root
a086f9fa8309b32cad6e06b6c84c12133a405483807f462eafed4cabc6f3fb99
Merkle path
["7101f5fc191ca0eb24b28cad5c2e486c3d692667cf9e8b8ec154a7b0e9db0e58","081d2be59957767122588c6ae6fcd04ba089e4f9ea220445a16c7639e82a1a22","2b50b8b2d703f787fc4665e1261bf1e2276f9a93782e27621b39c6e2ab46c35a","1d6ae4959ea3c0e569ec41726a125a8d5f954aa61e690669935a420b8e888225","ac7963baafec266b63427d3907d7125fe1c341be176802aebb1efb38abe2c642","c275db7e4fbf3fa056a28641a1320eef5c1a383fd50faed69b403ff1170fb8a6","fc0b1bd8fc931d3bf5cc86b670c56c5c162653302dc5d237ed54c49bfe10b4d3","d694d550d54630069c646f61a5e3d2ae990e4b5a3b426a3c1fc0622d5959ead4","6889d670c61b6bee16fa8a85cd42f31ee8605db04b2c208decd5743efea28729","736cb3eeecaa3810bca5b15f25c25e2e4f69a4953e5c3a99859c20d2433a8776","ed43140511e693fd8c2e288e0d6f70f01e95786a313c2e1d53efc40ae22f0054","246afafffca2f7633ac3b302d7076540ed8eb1b54bcdd20ea0afda4f6f41b399","c1423a4d1e3405e61a7dfa0f9f0d35446d77e6ae8a2a30431655b9bbf5a67719","1d7676f67710cf1152e64179021560b173262f0f0c11c7101c22e9929c376319","d4cf3fd862731bc6a1728d66b360c0434f801f84e015a828556d2731bd771b26"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514476227 · entry 108e9186e8c5677ab19c…
Expected log hash
9a346357c8991b17bced8f12238c2332c4ac3078c0d9a283ee00f82b3c69be66 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787129084398","kind":"published-quote","locale":"en","page":"brand:adyen","quote":"Payment processing is awful","rating":1,"review_date":"2026-07-22","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a612c23494a17403b28268b","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a086f9fa8309…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.