Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“We tried using a device analytics feature in InTune, but we found Nexthink to be more powerful, so we chose Nexthink.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2929513415

Proof data

Record hash (SHA-256)

8c6e4731ac84ab8e7c463deb47f5f70930697fc4c06777483d15809d8958956e

Signature (Ed25519, base64)

fizZZkXeOKt/xsspU/MDBxMyl9xoxlv1jaNpkXY8aArj1JOAIFIIDLHQmqVP61+/OteAKY85fm8HzuHNQ1zUBQ==

Merkle root

277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2

Merkle path

["8c6df45c6d5ce6db9f866f04b224b0831a15064d0ee057eb59616f914fd890c3","c4b44c097b09e9b6bb9a6a6f78252c7c0867a6d948459f89702243f38e753280","a1fe62509ab04bb821cd27a836d85ccbb5ff695170fc5c8edc8e0d002b5588d8","97d0436943e43dfa6a17526f29d715520fce8f0816a98b3be191ee09e1631be2","37530fbfe2661cf188143faf2b82385bc558ba3001309c7204c3f74a87cc2e0b","eaa8ceeef90ecfb428a61239aaa0c7ed3eb18f83fe84b2851d319af8426f8572","36172202e7936b1fed962bc84eb136bf7a0d2ab67dfe36040f6460f91dbd86d9","acabc4c75983b4bd9d479d614b5e336288eca4c401b8708a01e750cee71cc429","9bacb821951e53a6a09c0931b034ef28cb822853ad01d4f51908ac7a0442dd34","4d38d35f4acdc8f9ba31afba2af835cb868d53e413ba63418549f057cbd7af3b","9a996198f3f3cb50a072b13edd8b40533bf080516de915c95391c744b52b531f","a0381a26375c2e8599a6f8210eaac8a5d95699159c05c2a71dd8738e6acf0d69","47bcf17e9d39d99398d6717a5a1eb275a9b2ed23f5eae79a9d57d6bc7ac6f082","086e176eb6519c51f791fcd7d1f1cf11b9af8b1ec6cdf6772acb83e13e1da912","33f0c207136b5e5f15198fd5fee5ac8599f8163ffe39734a8f7f2847e77c41f8"]

Anchored

2026-09-24

Public log entry

search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…

Expected log hash

9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"brand:nexthink","quote":"We tried using a device analytics feature in InTune, but we found Nexthink to be more powerful, so we chose Nexthink.","rating":4,"review_date":"2026-03-20","source":"PeerSpot","source_url":"https://www.peerspot.com/products/nexthink-reviews?review_id=11000194","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.