Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Complexity when adding or changing hardware components.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2621233673

Proof data

Record hash (SHA-256)

ffcbb2c68ef1ce581768a41f3ec551587c3f91bba23255a6f1884ff710e38836

Signature (Ed25519, base64)

6f75uXxlgHHGFU0EF/gJI8wBqMKKr8J80gVRAOiItjgA9WZFqwhloP5RXJL4C44dlxQKlHQd01c5m/YDkoziCQ==

Merkle root

3e5b84dbb37ce6f75730ed2b32f91cd71f3a65addfb4db0a36bb6e93c637284a

Merkle path

["ffce38cebf17d9e0cbb4dc319dd514c4048b3b255f6ce9f97b80c772d8e4ca5a","ab3de461ada9173039850dd4cd8f61a42b330612b073b61d518cecbc4dc75596","8400f83afcff5fe7b5e10400df6d5901392c73ed76444b3e8b0592ee768004b7","cca227e84209c09a8c041470eb51b14bee7aa8a94c31f1a83ed4aa306fa00f90","1ed25ed6fdeecbfd92e530b99f19e794230e073afced2de250fe4fd40da4bcab","97a51659022c2766e240cc85f6d68aec621976f87f9e45b22ac1f71254360d98","279c142e86beece10015474821eaae7c9d896dc4edb0edc8f9589fde4924c1f4","56730803243d3b6b53deed240ebf63b5480428a954eb9b1d6850ac8b78db16be","068798de6084fed74069b5050a34bbc576a759d4b9ef39f395d1dd3cba82cfc9","dfb6941eb3bdf68ea74356601eaac1088a638f46255580402e4fa70039f5b5f0"]

Anchored

2026-08-28

Public log entry

search.sigstore.dev, log index 2621233673 · entry 108e9186e8c5677aab9d…

Expected log hash

8f69f81c385ed6162582e2743ec87609f0e5a311201997ab1f656c8ded6f904e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787884205203","kind":"published-quote","locale":"en","page":"brand:metrohm","quote":"Complexity when adding or changing hardware components.","rating":3,"review_date":"2024-12-17","source":"SelectScience","source_url":"https://www.selectscience.net/product/omnis#reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3e5b84dbb37c…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.