Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it got stuck in add email”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
75c841b5557d5cd4d8e868e546173fe5857eeb944083ecdcf07c20dacd8400c5
Signature (Ed25519, base64)
O1DSOtTkLanU/nBFPxkHwrLUzWNk/2DzjOPaqSFt7WQOIpjaZGh6Tm1LQNOxZD1eoo07qxG+AKM6UiG4nK2WBA==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["75c8b61f21e47a167d97b53f9265c17fa6ca06d17c7c1f1bc759235591806f7d","fc068be389a0ea0aed6884891eb51612765b0d1c6e61091346165f22f4181809","275dc4b3526101156cd6d3521752cede4e582cf3e33ef5050f59f1dd93f83156","a47682806d74c950f1c4b64682fa0ff70e88327cfb10476defcf23f09203ac47","a6c6ab8f4a7fd5ee315775321f0f55071f657239a6099675bebbaa84077bae6e","dd1fd935901d03bb666241ff86e294b9dea19c28114821b27ec076cd1a1461c5","b56e10368b336ec1a7c92dc7414052afd70485810dc2830e1a622727bf305b0d","7ee44c2d5aeb9c08bd3dcf93562c5d9a36e197218dc3fa00f70590f04429f06b","5c55f9b404a8f4b56cb9308ecb6c9e823fcfafa72ab3302ae03931181fb36c43","a9ce3b45012db43d966cc8230b5220e185652913133fa7187ea7aab54aabdc95","c667122fa092ee28a54ed9fc593c92a9b1c337cea1ac7cced16dfbff1e392466","d126874f810eb1c51838fa9fb17e901f6585d6ebc792c2c90430fdd62e551c3b","92dc205e4aa0fc1885d50120ca1ca6d484aa433fa7e4e33e903a12548dc38060","faf75fd6bb73a751917db6b8d00819eae7e29d2bb6f9270942a28e0da8dab05b","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"brand:rappi","quote":"it got stuck in add email","rating":1,"review_date":"2026-09-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.grability.rappi","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.