Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Super reliable and honest”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
348b74f4735fb81eb378e54ef82976f7cd43e6e6d1dfba399413213adaa2a068
Signature (Ed25519, base64)
IvcyBReiX0WsGuq1dUMpF61IbHqX+z++NgqRxSw2JhKURwhbx7rZrgCOxWZl6LnLj97Te4/W3j2kGucMx5smAg==
Merkle root
f2dea3193623a59d18b4d230cf1484689c024b05d34648a4bedfef78c47360d2
Merkle path
["348d2f6637b2d8a0f288e32ee5820d490aeb2356b73190b5f26e531ca87852a8","36792b76a5ddb0bda9b35887de7a70c3331df6a141745fb62369822901e4a482","11c3ed4ea724049dccce116bbaec82c36650876a9cb5cc43d60aff89482eed63","8ad5a683028dd15c4e48756fe4ce49884cd2cb4a8397f96be0acb7ce83ca0abd","0850a2ec6aea6e513ada80686402d1d3c604d104a33d2878436a6359fc948c25","20b060e31c451c96d3216e3b9ae3fc1172b5b90d8a2ccb0e180efcc75b536fb6","f12e057dfbae7201520ced9c34a76d641dece8770d391e212430b4ebe0085044","e6430e8fb163157fc22b6e267e265f7c814465cae64a2ddeccbb24910c619084","329cd90bdfe67dc309caa8a5e9760ca2cc37dd9e8026855dad6a1aa95f54a1e6","3f4da656c4aa9da8ed6dc7edf60a0e3e95c4c12430011b525a521d81d0e8e336","1e4012b8636c58947f1464f68995e24cb30bc48a7f2f69e43ba3c1229de58b57","ca914761c020d6d4c41f330c4764f3390122af15302d295f2d6dafc486124bde","665774a1192b73721b453ccc4135f39652e90d0c548e0465aa1a009bf210f3d7","c3040d35b4a41a3d91fd7f6d8e1e6868620c896bd0ae8d09b1351d70693bef08","658fda4333b0a975ae51c0ef52c37c157029d897878579fb5ff3ac48198b1bf3"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3163461995 · entry 108e9186e8c5677acea0…
Expected log hash
1e385e1035f15f3dbe860bb8f3e4e850b8c2ce2b31edb58c97be626995a4adf2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791544610158","kind":"published-quote","locale":"en","page":"brand:delivery-much","quote":"Super reliable and honest","rating":5,"review_date":"2026-08-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f2dea3193623…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.