Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They don't let you cancel an order”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5ee234c57b703fbbb0eec5da0129f567b5a74059c486d220dca2a1522ec1ff4b
Signature (Ed25519, base64)
6VwgH0lLUKjBq8p1G+PJcjXWi6Qw0mTEmDchpw8Ye/p0n8HPlg4mAFNqaDura5Myvl+OdRfXgDzLCESujPGjCw==
Merkle root
9d32c0cbfb02966e7a561566f948b48040888a6535c058e814428126106ff945
Merkle path
["5eddd1ea6bffc39e5a64b0cd83b3e752db1a64915fdb13843e0a8c3e6b944208","2f98e7d6bc92709fc7953308089ace8fd7638ec1bb6d8c588f12b36896140f32","ea83526eb6b3a6c9d7a7aee23af67ac8ded5f05480952dabba34f5db4e23a65b","e259df7aecca2072ba8937c08581597928182576cba51e8096e1a9f1c0b918ae","d0db58d44ab32067d71960c23e5cef3138f5d0eeee08b24f45ff3b57e32e2186","942c093b5c01b560ddbf05f31ceeb7375c281ca725882022d50a5659695392b0","ac5c0226d0956ec9c42042fdc2a3b0ddb0ea321c05de9c7eeb41e39af4b29e36","831e4aabe0001057ff12a84e99a6faec4c00de2e646dbcfb6380fae279eb1982","f4b5998eb98aa9042b4f66b231676044eb58a396e52d560ec44a8d06899f6388","866ce98118b23ad16b8109b1f86aaee0d5ca91b060084a7fa999c9eda56cba43","5edc2f39c44c31e77deab0c8feaa4a81b38fd24c082f66bdbc4f017ada91bf8e","988a9a69e8ec7d9143007c5423835d64b11d8bfb5d2f2cfcc9f46acc7ed11afc","3fcd45228716805aa85ade4544d04e795bb1399eb7a6a00746dabb625754cd90","07b2decfe383429cb71278f9069f54d1b4f607f991c518b70357c1681514c3ad","a892fc29bb3c992428927e47e35596c876cca06d89acb4ca102f2a534ba3ab13"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121837738 · entry 108e9186e8c5677a0c6c…
Expected log hash
a0090149b27e60cea52dd7dc5f0abf6dd7c00feef65be2874742fff2aa9e8bad The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791340487550","kind":"published-quote","locale":"en","page":"brand:aiqfome","quote":"They don't let you cancel an order","rating":1,"review_date":"2026-09-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vanuatu.aiqfome","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9d32c0cbfb02…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.