Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“so fsr i’ve got an account & debit card but no card machine to actually take payment!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d0f838af4bf8510dc0919f5604937de955bb445c631f078ac32c4feb34b885e5
Signature (Ed25519, base64)
4ATvaaWxgu6AgYgqhKEM0n3F8MlfghpawjkIGPdOIT1/PIb+PXb1nd93JGGvrtuQYJqB6ZcQj5/PVxBqCVlKAA==
Merkle root
cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path
["d0f911718de53441fdc22d135844cab3e6949bde2b0062ee01ab2d0cd25504f7","fd7806b1c8db9158218ea3661306f46002b75b782e1c05c03d23614693c13e43","f9e3f95b9468c2f3373986c718620500d87af4eadae5ded850b2c2aba5ff13d3","6708bb419753b5775b68f229ba4dc8e370c00e9997fe05cf1460ad81d3d80efa","b64d91f4d408fac57f9e0513e9c743cf7e1851c66964207350a23c52ec3d2dad","5fc18be256c1ac90e912eeb7519bc323bed7c79d6c242f6f150b6e3a6275423c","833a6780f7433448564593aafd9ed535b4fb610a44449409a3f071f2ac2b5719","51d8496c3f37ce408224fa09c0dc2c36704e3bda01c0de731118394d15a42a83","3732a05551828e90b1a8c0ebd004f8095d0297664d66eea61f1553993a9b354d","ff983a84e1c67706371ecd2693a3d3d35fe9945765fdb21cb12b4dc69e68f589","cb2a34b6c90dad4c9e2138df6b0962648531eb9e2f2cb40309b2d904ea0d86fc","f919881235eb9ad1a1da819a63bdb135d1da38748625673dbd3e4ea57acc8ad0","09a5a6a3b67816fe2922237832b2c38d16424fa44bf5d528b139477e36abdc20","78caf62780a7cd32d3591546c7643819cd8e2ced71a3bdf696f7fa96ed9676b7"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash
d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787288037224","kind":"published-quote","locale":"en","page":"brand:mypos","quote":"so fsr i’ve got an account & debit card but no card machine to actually take payment!","rating":1,"review_date":"2026-08-11","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a7b0ac3c4fca9518f91eebc","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.