Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“careful presentation”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1e006251b2d1c15fc2e2b9d59a37e92141b2b69f4f4194bd9033095724f27d07
Signature (Ed25519, base64)
i1Mw05Iliow8UsnQjxVydPgMHaa3gL6N397jIM0YSnE3Wh/OGUgheTfeL7rOxq4AHB/dBSQu/4sSvLHcLsv2Bg==
Merkle root
79268b3be1e951447ad916daa23d94d3a225505999279adfec84e5728be030d6
Merkle path
["1dfedce869930235f7bb7c15f9157b6405a3a6967dac32962fdc07896cd25ba7","f8476fb208176c551340c5c5b6c4d7f49fdbf2e6aef415e1da9299a8730aa915","98b01662db2ebe70a8338c5dde6847e232ed9d50843b209bc749ebf1ade19ce5","cf10729ac031d1b076aa89f5da37404bcb8fbd6051e8dc2c0e4bf49e2e39dc54","add4b6277110cc53db424e7f303b74212e1babae4f96957653c1fc7b13597e21","02b0c84004cec0cd5f15b2af118de1e29f8eee0df1d0830e6cb680769aac4064","dee8d301769517082b9d29745825c5ef593acd86f1a18f6ffcd4f4608b9f515f","747620e4cea5d2df2e9f06548583bf6a5430048669bc56fc6b327f58d477bbe4","e8af0961c41e5498626445a4b50b11336b2516e43dfa5e6363e46f9f261e0373","e9762b4f852d1d18bc2d04bbabb2e592f0c542180f14f68eb3d69f1edaeff7e2","678ceb3344c76dfda7371727396ee96e97a9f6fbea78f28e083d8e2fe3de2f21","385e01036b50aae7fbf449763f02e352d0eab1178ab2a26b3b0e3fba537066d9","ca0926b42bcdad354c17320adc5661c1a0407072f1d5c01424cc2e7f9a3515fd","b8e0a41590cdecf5ee846d5a4dcd3ae91c8a0a052b75fffe7c4c5f4e2ca53884"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3199014646 · entry 108e9186e8c5677a77ce…
Expected log hash
55430b734e4d00e4ba9c340c7ab064436f91281dd4cbc27c1ffc37d3e26a0e3e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791688566698","kind":"published-quote","locale":"en","page":"brand:rappi","quote":"careful presentation","rating":5,"review_date":"2026-02-22","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id984044296?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (79268b3be1e9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.