Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It always works.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
64030b0b33e22afef59fb3c00f903fdc54e25291dee922e9eba027dd9cbd011d
Signature (Ed25519, base64)
JF44E+UlCEfKuFVbxMS+LluoFtZNggL94yUyvhwU2X9NyrmYIbRXRRu1rgNwBjnyynvmE1wMhdOFZYSRP0bdDg==
Merkle root
c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path
["6403070169db390428075ab5c4c5bed0f3bc28c2fffd31d4f105cfd215297022","b99997335ea829e092e1bd183f1af57ecd00503eba9b6ea7709f4dfb8742d2ac","8b461279a17602937dba6730ffa935d95968ec363ca5457a58e546a0be06b742","ec6f4d2a01d502a5f7f3dbd701fb3122ed3e8f033ef07e36d2419f1df6bdc603","ef75c3a922088d89cf40482cab48fb0fed018ee37b20970c97bee8ed65b19041","a83c7b7982cb6b3f97be395ef624f70c895fbaa2ac1c5f3aa1f267ebaface6e0","f2c3feca284dd6be608b9667adeadbde470bce9e8d627203c0715ebdd729d0a8","39b532202da6c69c162d6795d52d1a509182a818f0ae387e4aa4709a7249c5bf","0e4e89df02df7e905cfbfef77bf631c340556969379951293865f1460db0e75e","a4672d26f6ae03bf4db253898b5dbf77d139ed46058abfdce852cc88baed66bd","bd1150220f84a9bc4a14071ee4dda89caca9de8e9cb82f054e190467f9d1ff8c","e6975bdb680ca61589e2adaf9fb8c5751c7c5d7faae2f5aebb9acd92eb2c43c0","fe401194a89b1a35c403a838c20d5686b9ad58181ce3567976f2ac8fa6a2f5af","4cd1a38cdfbd42b170e4929f839c7168ae4c49380e77ff0b1b146fb7e3e194bf","8308334b0715cdc2685afc133c95aa85c9b86c8dab9c8659092b74cf2783feda"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash
5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791348381030","kind":"published-quote","locale":"en","page":"brand:rappi","quote":"It always works.","rating":5,"review_date":"2026-01-08","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id984044296?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.