Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“it's been a bit slow lately”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3162767972

Proof data

Record hash (SHA-256)

784f3a50a4e46e92884c9c43565492b338f27080744bba3d7ae9c21391ecea0a

Signature (Ed25519, base64)

KHxFlMFxQCyHCjgUfcM2d71UiJkxvq2nt+cm5MtH3FH82qshypIw8XyEs7roDiqkpvcNLbsDvKPxdDDwDTCPCA==

Merkle root

ea9653d48be6468e8b38c47d968f49528ccd17e229f6df41b5fdcfc232720ce1

Merkle path

["784f8cad07a59012587b22fa47731173f9b4be431ff5921d32563040f08cb236","d75b0068f4a1ef437fd584f321461b55e4d060a7c7eb1fa53ea1e753ddb9f134","b17eae0d0a21bfac9a812fc0e501d6d9410b14a815d7312ead58c86f20503520","f768456b5bd10a6d887dc8f5ed75194e4f702cf43ca60b09b68b84484971a78d","d635b2e513d7baae7b4ed68b29fc8e3bad1e8366c0857140132ae2ce0374adbe","d7582978e51bca4449455b584936897b14b98700242531b8e2222cd18572e6ca","4d0a7c2f64826cb0766910b6c331947ff7ebfcf5fce031462b946be84b45ee34","cfe3a25084e9bf96fcc53f96b52086cba00cd8df7f93e1d5cde8cec596b5d0cc","bf2c7f22a311946f51a48d5a44b8f757db4a3e0aa5e92a25790b8fcb13b29074","01f75dee918db2b2ad362f51beacc8f9d007a5d831d1bb7d2f94aff968f88085","334d49369213e9244f201ffef3959da35daa0b296d13b3c90744c894f8701267","182421c42f44dd31e48e89ae9fe9f4260b76d70180e539225768fd2a073069b6","ccf8ff30a3103bcff522ac20eeb7c8bafaced0c8bb22a4b473e821c1f5835c20","941e58bbc56b1efe09a1b494813fe84c02af0a34c4d123d9b4a10e3358002128","142248530d485121153c09b780e08c6af592fdb4c333042d3cdd9e4160c6db55"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3162767972 · entry 108e9186e8c5677a40b3…

Expected log hash

ea8f60b663262eef5ec0ce5a9fbc0ace913092ea47c37bdc70ac392578ea0c35 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791541525227","kind":"published-quote","locale":"en","page":"brand:delivery-much","quote":"it's been a bit slow lately","rating":4,"review_date":"2026-09-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ea9653d48be6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.