Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“requirements are clear and structured”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e7f18dc36635cf60e8567da4cbdc3e89976a1d8f4806b4fd8343e94653e76290
Signature (Ed25519, base64)
8S/+9rbwPPEvXZCkFbbzUSBPoyCIi4x2LkQmT9TMISEn7+T/E3MSAa+c1tNtVODYVV7nwb+XwPY58XT7YQ6VAQ==
Merkle root
8ffad6e97d1457610bec7a891f189d1ba7dd7a92ca672c69ff1ce3283acb4b5c
Merkle path
["e7f0446732f0c3298c7ef5367c052b2ee87ff4b255c6da29aab52744863aa593","7ed5585b39c06291425f92ef9934c7602125de1b46e0869ca17f1011325f8000","7929578bef0393b6ab01c90ae11f47dda6f9a26ecbfb3251345c367caeddc2f0","8aa3fc8331dd25e07cc803b113edbd071586740a33835335f7084f0b214d84dc","91f2bce183b6691547f88fa70093aaf683dd315ef6e364654be7b40fd98bdfa3","220fb0866fc59326f75cde7a970810f1e053162596eb82536f2c1a894140a3b2","297b4162d2c51170b7381b323a997212b5ab7806ad09921bd0ebec66050dcda7","0d9cc3f3c7a30fa8d5b3bc4e5e7fed305f78cd345591bcc860e27b078e1ce02e","623535aa2cb7abd956a05dd6b463d0cf128355dbadbf0892e9c35f36c6142fe4","1cd7f94ebea85d4f560798035f6b9ee4e05c05e5b3f2fd90649d7678e9755c5f","3f20e679e330e19f05a6d202f0212bbdf9a6cc60081c4d9fc0d8614a87b03092","68f67ed9d4f0551dc8184bf1fe317b5aaba313190329d5e3918085a89ca09c8f","103549e053ca76b1164fbc6f4cd47c3c965502ff32950200621ab55e4e061dfe","7c94ff27d324cfeabd6b92fbe8fbca077bdf14d29975169a3a05e610d1bed13b"]
Anchored
2026-08-21
Public log entry
search.sigstore.dev, log index 2543266411 · entry 108e9186e8c5677a241f…
Expected log hash
443ef8f29d5167ebb4c56a46778facd07b7651afa8db2d089c14a991ce0d04db The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787284817344","kind":"published-quote","locale":"de","page":"brand:joincom","quote":"requirements are clear and structured","rating":4,"review_date":"2026-08-08","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a77146ba631fff6e19d3e96","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8ffad6e97d14…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.