Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I bought esfihas, paid in advance, and they never arrived”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3096409536

Proof data

Record hash (SHA-256)

5d5e1546684a5887c1fd6e23ac1ad511ec115fc8a2f0aa71b1996605fee2655e

Signature (Ed25519, base64)

qYz6oNAMRuM5JtyFWc1ESzSbtftZ6UzFG0DVdnDraRnff6wTbfLzLY0dxats7dHRsP4mUTSva0/yGL8pYieCCw==

Merkle root

a249ea91ed6d494b0d321c9d53d89a7bb9616ff6f558eb56f9ac9b7e3eba088a

Merkle path

["5d55cfc6564a92a0b6eb87a320e8615f1ddd1351ca7449f85f39017ec48c315e","52a73a543acd4bd17bc9ed3b8d365bc3b7aaa30c5bf7581f53e7f876bf5249c3","ab79659b3fb9d0e0ba6871b044981c389fb18cccbe20b5da2f1b4f4990228752","de1cd1a6c1cd58fde62b5132487a2537924cc8380bec5918f0ef3631e26a99b1","1782294d181b7096d856b35542206966d2f0992c61f47b4af6bbda733d00abdb","4f8c3ffa846fe6b36d1683a40a58ee2f2a410f2e43ab9a49f1acd9570500dd34","897bc843360a816f6601f87ed1cdb6564f7deab1813e4a7876dfc1ec31dbb467","3b09958b0ea0bafc225d179ed9fdaefd49f1e7a42bb3015c9a6be86e86ec5217","e9d56e986571ef93c64eea4aed1d544a47116e1760f5366cd3a5b4528e6b4d0c","7ce792614b489d547a829201f49a1de6653551bba4bce04414a8831dfbff7327","94e18daba3d3fd687cf2c211c0022d00676a7bcbb56f3500fd296680193aa69f","605f5416bd8b8c0bbc336c1a973a51fa8a6b93bc921e933bc3071f472da45130","d5e021977b34ad36b21da49b9927d272b0276f8c83a56fc552b6acecbe7e3ee5","754b3941f2d50a8472bcc5169721f8ff0fbf11f5f5f132a78bcf17e8d3758eea","281950cb809ebe3e75d0ee6e38a13b1a88e711d70d03b47950c14223d365015b"]

Anchored

2026-10-05

Public log entry

search.sigstore.dev, log index 3096409536 · entry 108e9186e8c5677ab1e1…

Expected log hash

f1740c5ce7036e4f36513fb4ccb4f6bf95b5dc879a1fb8a1f0778ef42370576f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791238940340","kind":"published-quote","locale":"en","page":"brand:aiqfome","quote":"I bought esfihas, paid in advance, and they never arrived","rating":1,"review_date":"2026-09-13","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id891143703?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (a249ea91ed6d…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.