Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I run remote actions on a few devices to collect logs from the affected devices”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2929513415

Proof data

Record hash (SHA-256)

7c16ae457387cbab41940f804c3903ded56c623abbb7482df57179d0ad972abc

Signature (Ed25519, base64)

psBbbF/7PFwL8/Yii7T+vQQiRsgO/eRF+VSkjmQbkssZHOs8Dx4+wzi56cDx5PdvTbsLzxXfIu9yFksmTFoQAg==

Merkle root

277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2

Merkle path

["7c13e71c58d4c9425eab3d3be3db01eb7bdb1b66722a02fd0b8244792407447e","73fc79badd26fdc7d2190fa641a464e7221fc08a5d4a1ef39eb18ecefc90e28d","cfb8ca69de7a8c4a0b12f10c628b84c79b2acbfb377d08f606152428a2da7801","27a3e623868cf000e3bff41748157bc2fd0d3d87889cfea78cb57ee44fc6e0c6","28ec5dad5ccd806d9f800a72048889629a08a17dff815b371d623455944f496a","5e31e92d5e0dd3bd341f2f6423dcdef300e5180a44d261d84c0a3fee498c18ed","0330d3e84e0da6df0553f4ac127bcfb0dff9c4ffa3557363dd27a263e4e35386","494e1ebb36f24dcd9d6993a8c0c8c45729e63e3294954da31ba17cebc9f3b763","1638eebc3065e718461f3cab03f434239999f1976c691097a73338cddf5e8cbe","0a9468806f1bdb3935ee339d35b50661bd561dbf84f6070b9859b9b977564ae8","00647ca7bdb11bf4483369d60580aaf22632057500d952492cf76dc0e1c52138","d098ede59e492d69a5edc22e4ea0a324ae8e5a1382fbb4f78d7fbe20dd21f96d","3a4557370606b510c9a2cb3a2ca3671efcf47160eb4264ac3eb8a4e9a9f5afbb","3877db10b6c6cae54d2b07bf0b4ebaa05236dbdf377db3895f407f63dda42bdc","280ab60d4c161cb719b6156fa9102f006908a25889a024565b61c42f89983a6c"]

Anchored

2026-09-24

Public log entry

search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…

Expected log hash

9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:nexthink/quality/en","quote":"I run remote actions on a few devices to collect logs from the affected devices","rating":3,"review_date":"2026-04-01","source":"PeerSpot","source_url":"https://www.peerspot.com/products/nexthink-reviews?review_id=11107505","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.