Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Often, it's not even worth buying the coupons.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3240231023

Proof data

Record hash (SHA-256)

5b0eaa9db33180ae74f55332ab4dfb6e89819123c16d7bc8f803040ca6385432

Signature (Ed25519, base64)

1belXm5yngwcb1LQ2+yrMfhijlpxENAd3dAtORjG/pmJsTFy1lWd4Y7lTXxNj41Ao4eegm3A7QTRrkgOjIplCQ==

Merkle root

888a38c73939ec95e6f226dbfb3637325026fcafc5a795aa4e227b811d6b2c84

Merkle path

["5b0f7e63844c34545800baca06cab0c6901f153ef06e47768d4cfdec3eb6a98a","1e08c33d94ab084a4e301b002291bf57add4997b22c898038168756df684a484","bd17893f4294bc73885834a7f2ac1a49bd5d8d5c3600847aa917e8e448dd04c5","d61b28389e3b1dcf1eef164b2ed83f4296f00ac95a4d6c0aca70858607d1b188","cf5a42120873cc41086f98b68529accb6de85693eed4e07d57c729463b2c5eee","bf53eb68bc73b9b9bbbd71a1fdba3014147c1382439be513967a293b0d8c184b","0b8b3d41601bbfc65622ee45c1244ecea402379e47bf87a9b85a32bc3743003f","98c9d4e830144375c6b3a349d33e26236ec299fdad388e60fb87e9c391178b8d","cb149fb1bf37da5a325c9a411988ee9d88b2df86e763feaf313448f5b494c15d","f752961a9b7470e3d656b68aed588e605636e427ffb4a28f74067ad3d60b3ca1","dccb3ef893f023e5d3a169a433d7e47473e23751a12ff4650c7265b0155f4c73","7679ef7762a2f2264918aefaef827758b32914a11d7fe90e91135a7bccfb5f67","e914982b1091e825c1b1eed272fcd3bb043d32154d866d3ead686c2cb77bc78a","f46648ad2fd9f2769b9fc0ba1c434d2040de67cbd8b7a61df7b7575cd5a9206a"]

Anchored

2026-10-13

Public log entry

search.sigstore.dev, log index 3240231023 · entry 108e9186e8c5677ac0ab…

Expected log hash

bc440cd3136178aee800fe49b9cf2e319542a645c9abbb8553c6ae1e354ce201 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791860805798","kind":"published-quote","locale":"en","page":"brand:ifood","quote":"Often, it's not even worth buying the coupons.","rating":3,"review_date":"2026-09-06","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id483017239?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (888a38c73939…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.