Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app is getting more useful every day”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3240422411

Proof data

Record hash (SHA-256)

5ceb79e5112e25a788ea89ae280da0af33835531e06c3f5eb01afafb2d359865

Signature (Ed25519, base64)

uF3Ly3WH8R5NiKfsKOviX+PbawUh8LiRZgia7x9XslLFgdIz0pe0uvi3xSoCNS0sRLjKyVVHoEj+ZqilQCHNDg==

Merkle root

825dbc6ca55f00c6c81d8de0f7a080bad31b79dfa0e721dee7ded0e9c294ebb9

Merkle path

["5ce90c52c02b73d20a14bc891a5d52f4a13ad029e8c794b71cfbf065ecf18e45","25707a833274b5bb2e20f726fed683ac60fbb24a34a6866a5ff6c75a2f387216","1bd10052b4d65e03b58fa437b55b76cd36a8b9252a1078a113f24e680df786f3","6d129c5711a36d5bb9dbc6e225b05475b09dd9b3aed42fd4b26d3d9399099e1e","1841a62c6c38b82050fe75de94d11195439145ee0d80f06d206326ae819f83ca","0c00849144ada6349f7c483a051351c617e9f538fddf5192875d2c59fa00b499","9045fc5a99b8f42e5124b8ad4c4ffd87e596a8ebc3b4d7cdb9fade34e75f66ff","5fd993efa3b9da265e64299b5bff3067cfec795ef37b962c2a980a881d0fba4f","3eff94a63a400c99896d745e9a055013ce2592becbe8c6efa78f07adb4596836","a7ccdfca0a6b688c7fa497616932440eb34d61a20c067f0ad8b1c4afaab4bc24","31411c64260ecfb382a1665604620e53b234798b6bf64622aa775f696ba085fb","b21f6fad7bfd243a35e3d331c6476f7ab24e9efb16bb512123e70fa3b40761fb","30ceb990dbcf69c7449b46a359a0167ed6280c6b62f1ee6cb61f71251c1e9d82","04c4bd8a9ef95bf5648c9d023612bd1f2446e83a6dcf83e612d031a5ea30e90c"]

Anchored

2026-10-13

Public log entry

search.sigstore.dev, log index 3240422411 · entry 108e9186e8c5677a0ea4…

Expected log hash

8667b0db28913263098c19cb6387cf64b6d68b1b8f2c4242d3139d96cef5da0d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791861703078","kind":"published-quote","locale":"en","page":"brand:ifood","quote":"The app is getting more useful every day","rating":5,"review_date":"2026-09-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.brainweb.ifood","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (825dbc6ca55f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.