Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“A huge help!”
Google Play · 5/5 · 2026-08-22

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2991846025

Proof data

Record hash (SHA-256): 6d366c36bba0a2c857178dd9914069c29c4db4922c50c9dbd91d6f7a72d371ed
Signature (Ed25519, base64): cAiHw4Et//dMiYgF9wZUw8QC1fWhLeUM2RPfhlAk33oBZXsh4Z4Ll6Rn0JPi6+jgXxcldnzvvXZxy1r0/RKQBg==
Merkle root: d312d00ed6ab2beb6e18f20d8087ad3474eb8b04b26d5ad949e9237bf3ca4c52
Merkle path: ["6d365e4f0bc6e0fe4fb438e1e0f29680113eaf17274ab6371a685235caffff6e","3fce91970530c15f3f5c0c726334f3698a5b3f063225af3ba39059aeb6151a5a","e204542e7e295888ccb11f04ab0ca212427881b994cbf7be0b6d3bfc2b41277e","0f5c3a19671a2f9a60b80cbc711139a20f114609d7088273ee163ddef13f8985","aff1d8133ba89c9557bac07c1e540fe8bcf0f6be95077d6f148dc853f8307395","a089035310139a8d324a6d5961ad0cf91cdf4c57692e439254e1932e96f89adb","0c296e1a9484adb0d97bf25dea0734c4e3445a6cc0af9d1f670015a486679c74","d5e074a68d2ec3398ff52ea31768e6d7519e759d683c24e1561cfe9eebb598c5","c2e79a2d30875b3132291505c62e041954a83a7eee7d87f03675909210a57674","e38184d618185851ac51817b26b5f3f472f5f2e9ba4b831d4f8e8b5e14d60dbf","e22870ff40c337c3ead2903bb564913004f1e9775d204669447133cb20565790","39c354258bc96a643f491dfc400e34c367a90b518ddd054968eb36792c4eb66e","2677d1cff114508638aaf8e9c4730006ee8b778ccb52fd7ae32f6136ea74705c","1b52c506e73c97f5d2cc9d574137c52cb370bf5407bebe9b32056b133838b1ec","2fe1a36eecbe6e65e0243c1a81f5f430e558c99de7c492361bda367e122fe03b"]
Anchored: 2026-09-29
Public log entry: search.sigstore.dev, log index 2991846025 · entry 108e9186e8c5677a5f08…
Expected log hash: 321e41cd200068478c5cf6f353f00dbd75153d3d8a640e241b1a6e8e4f8ac2ea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1790574513694","kind":"published-quote","locale":"en","page":"theme:delivery-much/service/en","quote":"A huge help!","rating":5,"review_date":"2026-08-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d312d00ed6ab…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.