Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“integrates with all my programs and apps”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3162173160

Proof data

Record hash (SHA-256)

85d43e568d1f6fed7b9760101bf1608f9da543ae1ba0dba64223940ccd02d9a2

Signature (Ed25519, base64)

dOiBMjIdFHioMKrlR1XyYTC7Z33uiR71FGfv+RKgf8LFiQVe12ZuTuCj53cRTbwXEfCp31neNE76c+dPQ0eYDA==

Merkle root

47aef0bbc5d347d2f064428fd7eda9e99f7cea2d49004267bc87db0e45c42023

Merkle path

["85d479de56c5d021cc8f670c679a56778e2e85e8122455962bbb97b097214d19","c586c61d1d5ce019c80a87e136b401cf41044999ca70785572064be7a1c0790f","334fe41f93d74d5643d247854e5eaf39925f09405681bd2d59fb8f699f6a2341","b912e88d88d57de054d01dd08fc0bd2394eeff406d694182c5b0063da73b61f2","ced17a5fb5fee8e3a50748df07f21c242f223a0989467d5a20cea62f696247e3","8c94f7156336550c45e000bad2b16159fb79ae94b485817bf4c52f89614b8ba6","123eaf499b60b4b535d6fef46fb9f59ab4211dd85452f83bf2edb9cca0b5008a","fd856914f40caaa5d258e706452a60947e35f5a45ac348b226dca4672b7a0b69","22a2b7ee68f3fb4653255ca738189f739fe4d448a8e40ad36c384a984df40896","28092894bbb33b0b34b5de5cf9beefc778a4f650bc06353b6a58cb50a567f2ab","06ebf99ccf4cc762e49939085daa67a883d9e67648eda06f883fb23c994f81fc","0f76f4b2b498b31726aee664e15e2f4cb43427245a310827425fc83a88ed4963","92eb0b51de1a71094bc2c4bc0f12199312f9f1563f5315889f1f7c189098208c","ae4b3d1db66616dc2ed116969d740c25ba42ba2e5f227f9b8268c3a651936ce2","681b858a978b3dea64df3700a937a058d6290a8e519185bef8ee7388d7739dda"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3162173160 · entry 108e9186e8c5677aaa5c…

Expected log hash

00d82a97e8d5da8f3bb4a78d598390d6b030eb8338f0e0735ffde6aa5047ae68 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791539060014","kind":"published-quote","locale":"en","page":"brand:fastmail","quote":"integrates with all my programs and apps","rating":5,"review_date":"2025-05-14","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6823cf1f4336a59c8298de21","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (47aef0bbc5d3…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.