Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Terrible after-sales service.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2c2874f90a284bfd4c80f9452f8453d3b27fa40826247752289d019cce65d563
Signature (Ed25519, base64)
42pyek+LE7leC9OBgVp+jbZltaDzwTDOHc57g0nGvJkrFOJtO630P7+LwAwMMoS8yrfI+y2aGCGoQH4jPd3QBA==
Merkle root
7e5597bd3c162c8b6d828ec7450367f642ce11ee386de414b88376dcbb621ae5
Merkle path
["2c2c76df2dc6b4b0381e99ecede2af4fc68cfcc37cddab9883a2058abc3feddd","38dedd7611d8518e967eee40452e3cb108e1db1aa02f294289596879798caf45","e5f1ce097d6142adcff2d3c390951d6e99a5b1429d654276f55c567de8b907b7","b0d0e5f135982c585029629545f53bd7bad3666d052c320495bd0e11e25c39db","7b72e2a560eda228a8468106512a486a656c918375f8d724d1b31936d192b89f","57c9d17c5f1d13770fdfbd44384dc034f98f00315927516bbb60e2856c9fcf66","154fc4f02749a541fdc04bac888dbbb9068cc258806b98cbeaf59e2bbacf17da","09fee06e8ef58f549d8145e32eb7f711e8d0558f699425a8bd9c9ffa4c4f1cbe","2936ea2b9e70ff3d689bab5247d91dea0d779226e5bf60db9cd72c4977f04ee2","96294063c60a042da288e0de0c0415681d6f8f1705d1a63b802ea426c12c66a5","6d277411f9ce20878cd0bdeded574b5c6772d6e489cd081b012a6e1a924b5562","9b9b471ab743c8d0f3bc63bad64ff640426ae2e472509575c6ea817aa7984221","792fea8d115ac482e9fef70a7069e557f2efb1af634e94e47f08bdc3862e5a6a","acb249623400215550cc0881339acc244e91fde1fa89bf36124dd51a7bead968","76edfaff3d5907039be8c493f114c2f6ba10fbab7705dc7ab77a269ec79893bc"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140627354 · entry 108e9186e8c5677acc98…
Expected log hash
82c9bd063e624267c60865e2416c3d714724e2c3b18c4773424cdf17232dd6f1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791432333296","kind":"published-quote","locale":"en","page":"brand:quero-delivery","quote":"Terrible after-sales service.","rating":1,"review_date":"2026-09-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.querodelivery","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7e5597bd3c16…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.