Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I had an active account for many months during which time I was barely using it”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c60db7d4ce831830e4eddf853431419a7c5f026c9ec765ea7f7efe6869f0b1ed
Signature (Ed25519, base64)
6YI5u2UNkzUnU3x+JUnDUg0AhueJOicLpf2DPia3Z0d25LTF+ECBNEJMVzRUrvOsfnnUrVvKz5Ola5zxRKLGAg==
Merkle root
c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path
["c60cff1c24c1a73793dc7ac9719bd456baecf192d72f44797a4789cf04ef2df6","e641cb69f6da9967c12e55f0759a78ae0c6e97045654f4211aeb22af64205004","3cfd1f5bd4ba62e0603116904049552b488d9bfd7538fde42751394396031469","ca18350496825947c2b1702800f7f870a9fef97d17979329f7751fce3ca5e79a","af425724bca60c921e2a644568095a7bf775ca5582ed2cd9b07eb3dea29cbbc8","b629de24ef912afffa522aba16c1140b4f80056e3cc660fe5c4517a1cf844a56","ee17ba1ad64dcdd16c38ea24a7ad8c3c6064dc190aa9e525bdf53ce116367a27","cc7b92b40f93157e292b46feb8ba35c922fc9e6eb8019d91f903b18dabc6662c","662a872f8a85a15ad011f6833fec41f20ba8d8c98154ce02b965028501737725","893ce3ef9e0bb8d492a2d5febb2b6c27c5747d614f6b71387949853f0dbee017","8008c60ff147fd15b719a7eb73e32c4ef9212961034bb5871a0bece57734e8aa","6bf5a48af1d78cbf35b873294f418a912d98d15029ed19f9a94a6680f1555dd6","784409ddab3be140dec350f237cb0e0185a25a3b72a80e8c9a65633caab6188e","7edfc85f9440fe7fef8e7edd6f1372271982f006f84b94693306aed78930ab32","ea816c3f8ecd74fdcdc9c068bf36a30dea5aa6d104e982532f9e8769ceaf3fff"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash
5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791348381030","kind":"published-quote","locale":"en","page":"theme:everand/billing/en","quote":"I had an active account for many months during which time I was barely using it","rating":1,"review_date":"2026-05-27","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a16e4212762d6c2e7c22d00","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.