Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“quick responses”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
16eb00397f5769c1d9266df1d9c2619172d3924306b0b882bcf2238555bc0b2e
Signature (Ed25519, base64)
y9KzgEoDyKnVNRRTfLDiXeeH0EDTjLJnZ7667OCa1spPyA04FcnBDBGKHeRWFIfMxio6rPNrA+7XVigGjIWoAQ==
Merkle root
12764493a64961d0e0d426bbec64b837c2e35bc22a58920afcc56db07df6e8c9
Merkle path
["16ebf3022b4d8c271ffff528ea9af60d6edb0337bc23a9d14488dfd3cea1f58d","9c465b92319e65dfe1db5802e7dab3a5d82f8201c9ca84120e7e383d1a1ca132","06c79d6d3221ae8ddedce516c63352e13a145ec053cfd8fb28b186f38ad3eadf","00af85d6209827b98e8c409cfb15b703b5909d75001dd7a207a36341c5dbdde3","fa613e1cc3c7d848112765e4d1ad408e64aae2007e6b714600200f48b7af8440","d7b5f6d74cfe107e124c0ab81072a0b8c3a8802f2cac11be574a3dda1774a9c4","18b32de71e101626a87a45d333b7d179a378b4bf986e03d02b9521fbd265d4e0","fc3f6a4cdc1bfa38e70a188cda4335fc157661a4be752ae4eca903426873e6f0","edccbea513b883708c28756668060624401c178e0b66f40e7c584a9dc1277b2e","73ff59833606bd85c3e269e912b676ef1a4076efb0b4b20c336c44a151111bc8","713a63a5291b83641603b7a9e9e52ce5f193b1b465cc3d5a1672a80e3bea976f","5629ee10ba4b7cb4395bd3f7417bfe15e0278eca0a90e9ab5a5626f1b4cbbdcc","b6c6b7aa75be4fd4f206793d7c98702963f427cfe45d9c46972416cafee9a131","bf01790763bd70681430a2841b8504c59b88918b5b88c9d70f6ee7041d7ca6c8"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3198225546 · entry 108e9186e8c5677a10cb…
Expected log hash
a11b46fc63b94f32c49058752856fbdc4e92f7a41d4e67238e3563657fcd50e4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791685609571","kind":"published-quote","locale":"en","page":"brand:quero-delivery","quote":"quick responses","rating":5,"review_date":"2025-03-02","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id1357804341?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (12764493a649…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.