Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I emailed to seek a refund, and this was refused”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2544236959

Proof data

Record hash (SHA-256)

a185562e8ef6d4dd99ee93777fc9c37a40d8c72cd6b6d6b909f8837339c3c144

Signature (Ed25519, base64)

wKRGLC51/YOM7wnmTwvpWPJXzpoPU7BLRD7LaR4X91rz1gdlyA2rQJcytrSbRY+jqa+bzBfaqNhr716OwTS6DA==

Merkle root

cc942239c46f13b1af6cdba0960a24a6cb62e7a7a462aae1e8126c0182dbffc3

Merkle path

["a18f1d0baf4e4f5e10eaa8b341925df3cf4d5d142520966db814cd1380b22736","6417bb497063d4552897c7be8488c2bd089e67180bdade3fd0ec9e1a270ed276","b04415bb689593e826f6146dfb0327b787553d83b8091fed54b04b8af1098d7f","3c5083d71f3b9126f3390c34cb9295ba3b3bc0d406f2db36827f7e9e4f750bf8","f668575542487e94e743c80fcce24b58ef6ec6c60ac9f55a5d68322770543b67","c7f10dabbb85bb24b53bee1a211876d47b9f974927226502ad0279ac5d8ccbb2","9a7a0c3ecf88e1f6333c37011ba47e358c48d1a471f1274fade5a1edcb0d03f1","66cff1c027b80d461dd503f38012a5842878dd5e7b0839c4de27a4060171fbce","cab651d1bd286a71fedf3f25808c1126217e95bd0eb7d10f93fc3aeb4b794c9f","e4576797e77471ef0ee01a9090ceaa99b791fe2e40fd64cb7ed1e1d38670d55e","21cf37a29c539c26c51c077e14b97e72fa09ad4774a7ccc3091c32704997e14a","2087f1457331087a09d26542a2eeff2f7ba6c6defe2a4d5a6513941cf1a33537","72b50fa4c81ff112c2c888ce3a6c0a9eecaaa17d0fb6234aa2344d0f3f85c205","9a1346831517d7bfe15c9cafe704fcdd7e5320eb2bcb608a630afaaba7d67d2d","f25e568e6bd90a5619f6d6d975016290629a8afed06b80200730e4e12fb2d1bc"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2544236959 · entry 108e9186e8c5677a0341…

Expected log hash

c82e13ba2a716d66def44df55ff50c2e9db35da204570a7fd5650a8bc2702db2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787290890795","kind":"published-quote","locale":"en","page":"theme:xodo/returns/en","quote":"I emailed to seek a refund, and this was refused","rating":1,"review_date":"2025-10-02","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/68dedd97988b851fd5db0b89","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc942239c46f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.