Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A very good option for delivery”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3123541116

Proof data

Record hash (SHA-256)

46f12f9753563e1dda3f73322b46e0a6d37d69c2f54c20a790d8c99fa2cd4809

Signature (Ed25519, base64)

5OorNppyalAPYAw/518KXH+oeteWDd0bubS0DRq9208X0oPuiPWTkdlu/sqy0dvgI7txbuPVESU8FLPJvcG2Cw==

Merkle root

6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326

Merkle path

["46e898196a95b95da77cf3b16e8088c4e9663c8d2fd520e7d8f59b7d4efb0211","aa8cee9b7541e5993e05414ee1d45ffc5b1c8df771201191e9089b1ec77e2497","b3fd15aec30cee1b6c14b164974c18959b0828fdd2b73c86f3f75fc8820109c7","ad2bc7b6f809927bf0a5c3ad8f01ad34d9ec9dc22ea93bee7b59b78f1aa9f038","3ab8979e9c2218f2a7b0a16961194e05e2da80f33e2ccb97bb848c22b20b743f","18feac4e17aa15fb31d0299659e734345571e3ebab40e48eb13e5f51e08fdbdb","4fe553abf5df6293c32aef967d6f9e979ad3d45de7476565bdec2190efd3ea75","b1eb8406c79f00e99cdbdd27603e9bd78760504087ea5006c761f14eb810d330","11ba46b7bd23bb3c94e98842e36b3e236254a9f4ac8862204a0d7291e3f5aeaf","4d7d33dc262b0838d7d03a328e05072e509867e1c5715096a29aa7e47c6d9c62","541ef37d75065c425f828c4da38b7de1bd899be23c90801ebd79fe73540bae71","0354c610fce4f56066dbd09daa9aae97d32446e2977e34b7313d0ad02d98a0d3","1eb8d1bc6a34f3540773b4d1e91cbe51b40cfd5c56e13056e24402db6850db66","4c2172f51b2eef852eb0ea0a1d4f8bb29ddcd3a6f382677ca6a66af43412dce2","6036173d1fecc6618a44f9a6eac2357cbf937f65066abe2621a2b8d1580705f1"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…

Expected log hash

9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791346951310","kind":"published-quote","locale":"en","page":"brand:rappi","quote":"A very good option for delivery","rating":5,"review_date":"2026-09-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.grability.rappi","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.