Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“its money well spent”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3029042635

Proof data

Record hash (SHA-256)

ab4db3551eb31ed82b3f1b7f42c0de45d2a8b7ba3767b80b5fc4857ff7754670

Signature (Ed25519, base64)

KSYgAO9jhkyE8TX0YQYmX0zlbbgE+DuufCGQR7lTLJInbDKjSUHRuNGl5Zr4QixHiy25E8OnjWeUfj+WLn65AQ==

Merkle root

c9e6077a1bda893f1455402f424b1d526c8cf2f47d428b611fd8d7fd8b45f80d

Merkle path

["ab4ed4c2dc3555b07557a7cc58cff6691712c308a037fe63a6f8e459481fa2a0","751555fa9c7c43c15bcacfae721cf0351ee85697cf957ef135fd556685a6dc2d","7c075ac71877bc2ae360f4e87c6b43fa1f5f58a8cd6c0cff99f6cab2e6b4fde4","62e489ea320a31ba056ebaf8c24418319930c604af1de7a7fb363b50bce64e59","a2a8460d266c7f70f8d762b7771ef47bc8640dd926cc37ea46704210ba6df5e2","e7da2d4900d30ee69b1cec7d41a64807ad7720e275ff5358097730229823e214","9cf1ad5c22a4d77e2b3b285939aa27ea8063be405a209ed4f6e2c68c8e2c4774","9642666df0f1bf96b45efee65328ea9dc0d654ea64a3c993325d016914e2fbac","fcb594be2ffb9f8eb198f382d374117e8562bc079f1a3c6e19ba9df0c2a90557","9adb905ddd63d1c7b1b072bade43285fa6967fee356d56fc167e12ee1e6e21ea","4ab7b831d9fc64b1618ab8bbfc9f9f76d7a129f17330167e70ac2f7b01062a70","f48045840b6ad6e37a1b03f1e9b01ffafd69fa187ab874c8283c164218ec7ae6","8d810c8f9c62441734c87c36156dcad8983bbe1dc90b3b2854fb49cc7a54d2bd","1616c16ecfa49e18821de7767bf3fa1e1a6fd3ec2fa090ad2f10f8770da252c6","e91b4f1cf428f19a0932cddea6de9c1c364010417f9e244d933b133a023a7aa3"]

Anchored

2026-10-01

Public log entry

search.sigstore.dev, log index 3029042635 · entry 108e9186e8c5677a4403…

Expected log hash

38d9b7e95b1b3c998a8128983d818774fe7ee047adb6f05ee608495c2d7aa418 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790741815621","kind":"published-quote","locale":"en","page":"brand:spotify","quote":"its money well spent","rating":5,"review_date":"2026-09-20","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6aafac402673e2ab0c6863c9","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c9e6077a1bda…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.