Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it is perfect right now”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
72241f93512e16228fcf801eda0312dfa638983fef2a75f6bf04dd2cd0c034c8
Signature (Ed25519, base64)
OZlLNmWGdpAT7aPQtWOxx6hLlMeAI/84ZSJ7xYL4uAKmMg2G4b/0qRPLIaOqqOD8DxJ1OONsEvRXj1+rfltSDw==
Merkle root
52d6be1abed15ebd0724a0e1a493d5805e1ea49ddcaf8e9e5584928cd3e4d759
Merkle path
["72212cf15c901c29d86cd52b4b3f435e2b59485ca333736f04d7d978b13cd8f6","83a9e537332d3f6d81725a18585bcf3753add437d91aaa2307670ecc8697f1d2","c76d3bb2ecdc9bac73f047679c0ee0374f0a35438babe502c64ef9bfa992a378","ef766f2755a307bd62b5142584313bbd7186edc49144cef627de19b7f229c78a","ac7749177c1ac2c2e5d52aec0c645046c3ca0d773b37526685db854da1301008","51a1557b6d66b49ecdab97c823817e80c27867cf4581ddca2ee6426eb66c741c","075f005dc9801d1aac66e025358cbe42fb453b0474b928734432bcd80089c147","23b653ca9c2069779c2165cc8bcc99d3c5e4729ae2f87dd21e8fa92277c75cba","9ed6b1a49dec028454a4fb84555b34e37c0154dd8c71ef7c486ae3b18ee18fcc","cf426484930a7a2b553567ff93d7c8a38057f791f5878fd28d1074e8abe9837d","90781357893137797a22acb1b41b55e961f13b08476a5de1f011ad94b42dbacf","260348b0a5779fa06f4107c3c0f9ea1564278f13c24b32578fcd3207fab3eaad","b385fe89375278f2b45342434275d4a9ef2cb82ec9dfe399e3688817019e556e","64b3ccbf7465086dd7db73066d917eee6e4789a39addca1cf1c9d0e38a1ff084","b72fcc24171828b3fdfff6be65bb433d37b8e51a187739d27a216a784d84cf36"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140475820 · entry 108e9186e8c5677a78c2…
Expected log hash
bb68bef30792bf00f645df162a48943f770bc3f026216a44dedb4651c8ac0917 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791431489246","kind":"published-quote","locale":"en","page":"brand:quero-delivery","quote":"it is perfect right now","rating":5,"review_date":"2026-09-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.querodelivery","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52d6be1abed1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.