Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They helped me quickly.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
74da9dfef57d582ca46ff49ad86a40075cb5987e293fe2fba0772c39541c578c
Signature (Ed25519, base64)
J4NcxeyQi45GuE9uK+uCOGvpbTfvE+U5UVMJ8UNHgfK1C5rj2zz1GY2hi4ESNX+cGD1ZvIuuZaxOiSnl4KyUBQ==
Merkle root
c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path
["74d761c44469c8787c37f01e094fae79e9ecac4b7794b680fdcae95626a3a24b","d2cd41196ff88c9446264b27af64f9cba1b1f4e243df6404d907884cb5820952","782870304ebaf392a4c2d8b5aa193ca51ea3825dc7f105ac0884bcf951a41412","c9c1573cadb7a4af56cc9f9eb2d1cfd65b56cd8864f10bd89fe65583fc31585e","0321823d7f1492d100b4f2a655f8a1a366dd9ccb32f35c1964070900b9c7ee3a","26db7bbe4fb2d7c1ac982efdea27c1ebb828b783331805aa73ccd94cd6de53f7","e21ff9e1acb8c99ce88cbef31d96706198a13a7abba84dd45addc7f529e90c37","178fe318c525b4dc1c9b8aa2183bb96dff5ac284af59a324c8a727b16c56ce89","5f8b1782d498c07878281b1887cb29a95824065c8065da9040d04eeccb0fb3fa","7608822e416af23d65485194986034637bcccf13932fe7f96cf2237d25503425","cebf5a15968c85b27d6640fd437614cb664bd209dac7001c8ae8709054ed9da8","da03e21799f41fbd0d90a1ed8be0726e145a9fff629c53f346646f1ef21b9680","98f2ab8272daf030d2ea0929f9c08ad47d4c9b5284f3c2cfb819d5893b3773c3","4cd1a38cdfbd42b170e4929f839c7168ae4c49380e77ff0b1b146fb7e3e194bf","8308334b0715cdc2685afc133c95aa85c9b86c8dab9c8659092b74cf2783feda"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash
5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791348381030","kind":"published-quote","locale":"en","page":"brand:rappi","quote":"They helped me quickly.","rating":5,"review_date":"2026-09-15","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.grability.rappi","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.