Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nexthink detects the application status post-deployment and then reports back the status to the ServiceNow tool”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2929513415

Proof data

Record hash (SHA-256)

f9a1b4a56c492b35f995d27cc4360b8e6a712988fa7925cde304fdf5ad66adfc

Signature (Ed25519, base64)

QRQ/SvcdctFLz1dwDa20cOL2dnCwqPqK0kKWuBlYY9tw38E05E04XKMf52D4a6wEWCXhTlo7iq6E74bA5k8nCA==

Merkle root

277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2

Merkle path

["f9a1dac806a26fc7e12f6c370ddeaef4ef9b86906f6bc805fcd1ff0cdc9a685d","fb4336ee99648ca860c5e6689677911bf74c6b0ef3bf9cba1b897b6c66c54bec","96bcdb301f3181a564e5d085cea654309df3ffd93c9bdb30ab7aedaadce2c524","31a6cda9ff95cb5b9094f835e4d4905f8e368b738f67210d83e93a29d1392bdc","c74e42e1fcf34e581c5df6e7ad2819023e84c51289e60069eda9fa8c21793fb8","5309a19fce98c5bc58d68123fa53947930edd6a5fc5bbb7454927039daf69ef4","72f3741fa7a7f78f52c7efdadd2ef7fe58141acab7a67e163a5ef82888ae91ab","faf3544a1af3ce230be861a67de7ea7191d8262362c1b07bf84021b2888b0501","6f52e2fe1badd3926919fbc5d4f316a15b386c46dd7c7c789317a375d728334c","ca4171887bd7493cd19058428d43ead27b365e87817b81d6245db13b1b3ccc38","c1066460030b23f094978d2e425f17fa7dabbb302aed061549ecb76aeabb0d31","d1585bfe62e9bdb3225b7b8a177a004e4407ca194a3a76f3eea23ab3b55e7834","3aab6e4a07b42e5de72ad01ae4276e6095569b2ef59e0addf0653398495e4c96","33f0c207136b5e5f15198fd5fee5ac8599f8163ffe39734a8f7f2847e77c41f8"]

Anchored

2026-09-24

Public log entry

search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…

Expected log hash

9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:nexthink/quality/en","quote":"Nexthink detects the application status post-deployment and then reports back the status to the ServiceNow tool","rating":4,"review_date":"2026-05-10","source":"PeerSpot","source_url":"https://www.peerspot.com/products/nexthink-reviews?review_id=11126731","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.