Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sometimes you get your order. sometimes your don't.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3241341297

Proof data

Record hash (SHA-256)

59eba4fe51e27c25fec4a98d1d85766b5ef34ac6c601c62fceec77be529d7796

Signature (Ed25519, base64)

6yOhLRxRE2BR88OR0d6B+2N77iCIAbgS/gToh7ClHkVDeDjdbibql7AKUDDWNUDOC3IaDEN5ssqef8lZHJAuAQ==

Merkle root

4900b1080bdcd3b4c9234f01647614e7004e0a1ae01ead44968e31abeab33265

Merkle path

["59f680efb86f0ff8e3dd461cd2394d693d383d881f9e39c0f18e758b9c2eab19","6ee32f3da300cb001091d1e3016cd87f2b2acec3f549294c84e4d4d003c3705e","b4474d1708901bd0fe4d5d135fedb1aebc1e38e97c36751fa08f9212708dee83","8a9583931a962eab3ca468dd46b65873a6504c4f3d9c7259f7fb09fc846548d2","60766502801fed156399717d8c9ee582d4116ade104b5f09ecba46a4c528d14f","765bc1b53e92bd8f7a03066bc25889461b7f2c240e9f68cea2feeba0896ae002","6a764798b8eafa22724174b985999a3e40eb13d17cca6cc328d0f96927b1eb3d","4fba2a1a9b49ff877e8ed04f5111b9bb98c49924c3b1c77fe853f0bcdd1d79fe","d3c24a120ee18b8d54b241170047c175848c14a8c1ec78e7ac5f9c818f770d6f","6e306d44c3bbf63ce227a4257ba5e05acfd1629f02466cd29f5c80ac63fec52d","17361d2175a6014fc2dfa30fe0ba75d32fc3ec969aa9434655602a07b59f72e6","8bc3d3342d538ec2e52c4659d41fadb97b0038a716b891902f4266532368bde5","fcde407cd823adf65f7404afd4b1ba5062d4dc9b443a0ef9b9102b09f040f91d","0a4842003c61f69c5923b6aafd56426e7fe934e483f7d15b620c07fa61f89152"]

Anchored

2026-10-13

Public log entry

search.sigstore.dev, log index 3241341297 · entry 108e9186e8c5677a0e53…

Expected log hash

39342fbb95f8cce5be4111719e5450984494edcdff99b8bd9a5c0d2303b67943 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791866192176","kind":"published-quote","locale":"en","page":"brand:ifood","quote":"sometimes you get your order. sometimes your don't.","rating":1,"review_date":"2026-09-20","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.brainweb.ifood","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4900b1080bdc…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.