Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the process is a nightmare”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514446349

Proof data

Record hash (SHA-256)

f30ec54d0f42d28f3e8af993556f541def55be9333cf36478e2a1b097a1fadc6

Signature (Ed25519, base64)

ZOtZ/DO1aKuZaoNkLxCW0thVcai73qWoXKXdUljQFZQDMArGZZNGdQwZQItXt6WIoh+ZMyeFkWYQ192ASy83Bg==

Merkle root

3030a3ea5b39192cafd732e0b397cfa387f40a2253f2715cd6a4d9d218dba468

Merkle path

["f30e5d0c8d566c20769456dd6fabccd7e946aedb0599c23881b171486b66e74d","fc162d91f8f476c8d984060399dc01aab75d325e57479ede496b9ac1e534fce5","de096ee199fec667256bf20d80fe864abda6b916809288df3cbaf8fa43ca2bb9","6de16c658b1f5102551fc156afc6cdd18f3d12eebbacd38afa64127fe70ce334","45a76ce4c41596a40ba2a48a572af8668e66fb632d7691e488394b3c5d370050","ad8b7a1ea355090df5dfeffcf3b55f7306749e5bd57a25addb72b545f9c40501","eaf7707a0a02b1ed87eed30aa6fcc51dc14a02c95ef1c40d4bd07f5f745b6433","b8cc901f0ce332ea06104319221b04b143097e2c19233d6cd5254cc03ea92a2e","d8129d05d2ecd5a46196a65354c10c384feb84d27c5f7d1929fb932f54170af0","d7436aa3e69f8b9abc6473f6a44a38a367d546951e6775e31ae5914eda262826","352e356f27cf91538d0d3c629642f1237b5888c1900128ceecb0cdcb7d85ef74","0ea42471057aec8c3ac4ac6621fda487ec59b98607af6dc1ccc9c03a24175618","1c0d046578e667374df87204533133657b4a39b1566c3798d3efb2b6dff73361"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514446349 · entry 108e9186e8c5677af084…

Expected log hash

901e903dca7784cbcc0b860ca8f2ae684aa8c7d566efb3654aface7bae409ccd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787128322154","kind":"published-quote","locale":"en","page":"brand:bookbeat","quote":"the process is a nightmare","rating":1,"review_date":"2026-06-25","source":"Trustpilot","source_url":"https://www.trustpilot.com/reviews/6a3cd1f7819356983d97b9f4","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3030a3ea5b39…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.