Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“they have not refunded me and am not happy at all.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2890214870

Proof data

Record hash (SHA-256)

ae7a51fbb161274dc49fa55a936f155d16a86b839bbb044a303e502e7cb55858

Signature (Ed25519, base64)

4zXxpKd6aOthLZ6tss/GqnOZ5Rqr1XOwnx6GqppdVZU6vG1lS0iy+k5T9D2yCtfIGRnrRm5ciPCGoNIlNCirCw==

Merkle root

04b39eaa56e1cf8f75dc8eac18bf6942167c8418ea731a7471223f0be60e3e6c

Merkle path

["ae7c5799397b7769d0dd1e5c490f0288ea15567600aac64fc1416f742af37233","14a3392f5ee29cee236f2917bb346ac89e33f647cff6c08d02067e4d19fc8294","e995bd3393745c6a776cd0a496593df8237fac068e1d2abf28b32a0f85cdad25","2f68c0d5ca699ece70d67162d428bd3de2d7610f5cd13406978d20dacf89849c","b97746fb191e8042a3ca36888f07a61d9ec904f1ce4e7f8e0bc148937844de40","7337a660f987f13469ec6272290b3595fa65167a903cd8038493c9250611ac85","f40fac3c90867c780db687edacfc82cb09d984e91e99a8fb823d45a2d61202c1","6c34a29ffe5203746e5ba0dfa3f322b479cd53e36b2255ec47371b99b797bbfb","cd4c8fbebb734c3575d3cac64c1a34d79b05a33489d11ebb3a68b19169be6413","00939659b2ae25511837adf6728a188f31bd758e1abc58e15078c8a054797b73","76bc58a8ab567ab0ff729fa45030cdcefa42a6f685d264f867127e3cbe1966b8","e27b6f0d2a6e378ff36cbc28e04f11599bd9917f1291e082191342792770949d","2f760d0f42bf27702bb03975eaf8d6ea5e036b0f49b2fda05a97a4b8e2bd9942","8f074eddb198349108c1e544aa98c8c80e756f627b29b4943cfd74cb3331adf1","3ba88b0016422cde319348a72d81ed01eacc4bd155bae80b5c4b6ab6d98a745f"]

Anchored

2026-09-19

Public log entry

search.sigstore.dev, log index 2890214870 · entry 108e9186e8c5677af53b…

Expected log hash

1f3acef0f063246e051bf412e40f4279cb96ed334ff7b0647a13320c1b31c4fa The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1789722569406","kind":"published-quote","locale":"en","page":"theme:xero/returns/en","quote":"they have not refunded me and am not happy at all.","rating":1,"review_date":"2026-07-27","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a6769d6afa42bd8fc61b5c8","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (04b39eaa56e1…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.