Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They didn't take long to answer,”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
760a657fbdbaa10f4c696132b756e72acef9a42013e45af86759d696166a392b
Signature (Ed25519, base64)
zmecHKpzsrZONEAcWVvQivVoD1qvCcNA7gd+rffnHqZO7fixDKIUwVFBO9LVKe4NlUspAqW9OFJYKlxmDjmtDg==
Merkle root
677e672fa444dfe5152ab91687c577772e13723ca441b5c8063508daedacfe44
Merkle path
["76054a80004b382834776c0bc4008f19a3e265b216ff0d0f4d561f17a3b4c8eb","d67380ef593a0b42a8970ef5db79bc37b55e50bd246942af4eec7f2c85a451c7","3af67625e34fa6e1c118da0dab4d65b52e500d241136e3c3d5587e06a133f897","1dedb952fc42a08eac6e7e1a59aac52f5c569ce6429a30172f8233901918e896","d0344234d8f7e8c2c95708955dfa0bfc4c253dc383987f59c3201ade5c011ff0","e9bdf9d108ebabe8c01d18759d8a4a0a03d49a87e8bf7531e6e527f0bf359beb","4e26b8ba1be2fbe0d04e53da5da7247863fd182d25752dd5a329321b620ca451","fd2f5bfab109ef4230c271d1b89bf0ffad371aa016e88f891774796ed3d28731","11918d4b67908582e8d3ef0c89cda704a0cc17ed9d52671e9e74f56fe1857c21","6acf80421541fd8dda851e0b26873dffc5999480e23cf220a6919cb7444ce9b6","64c82effd738e049809b71299e4b97a9aff3441d90ebc8474d655573ddedad59","dfb2e8953d9209eec2714596d39881de17af35f886ef0bb55375ee5a043837e8","ef65dd9ebfc0d3ef62099f320670e0ff1ffa0aefd392ab7dbd6c1c6483d33d7b","3e9df542f4415cfb7321e531014c29668083cb06fd7805d6083ebd6b24fa289f","188420cfe03d9830600dc87f84622c41659cea53d9b8db8954bfc926ce1d4dac"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514013184 · entry 108e9186e8c5677a6b00…
Expected log hash
a596e5a342226b61371cdf76b5c8be8e37a3d00e7ffe8f7b0b550e1a8d1459dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787122978040","kind":"published-quote","locale":"de","page":"theme:canva/communication/de","quote":"They didn't take long to answer,","rating":5,"review_date":"2026-08-05","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a737c9abe595d571e686149","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (677e672fa444…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.