Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The packaging was perfect”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7b687a7171e0124b5f9b04da47823fab5dd1d3ed6f41c912a93ed89a75024997
Signature (Ed25519, base64)
1OFoFgvE+BFLcfcx9tTBEKMzGzk9KCPPwhbIZ+TksP5ZJsXvTHUvuSnCveNc5zu8IYh5O1gQ+w/5g8g95m5pAg==
Merkle root
6d3f7b9a732acc39631b9b7a5990b6471bf710c9f84e5623c7b4ff4e1ce78326
Merkle path
["7b6710376e9aadd3a10d70a754fb693de3edc1733413b4250b65b4a49494981b","f9d6a89ce236937c0adcd03bfbdac5683d55a8724e0eb44c3f30c387e40f8929","29a1639419d7ca62706e2eb696059408692cf953e75bff28f615e6ab86dcd4c1","dd6d17363353e41a6fa6262e5831de57b1963a67e874e27c20b88a3df1cabba9","6c7159fffbb1d6db3664fc19be538f2d9bf080ba1782457456f20c85f0a27278","5cf3d713090790d9ac17942748bf14b99dec59827f783f9239110049bf0cf5bd","6f2f35de856bb7af22d7f6cd13a703851d5fab617fb671d828c8d094901bd047","721d25b1648273cd5cd717170aab8ad6a2794afdc8ce4060c4e726cc62aa28a4","b7bc3f28d250a74c893c76114939fec6f73a3f0a860bfff4e0366257fdd8fcf9","f8bbc43e848097de11321860b26dc5bf069dbeb54af59f52fdf74c1d0b1f4d1c","da25cfbb67953c2f5bd105d68681aa55832390023edeb867d79f7573446ae93d","acea333ec0cf93fe37180dee1143550a537c5cc65f52eb01191088dc54424aa9","1deb554311ddadf910c37fafff4b86012a306c774652ab6dbbc6ab69a5c01d89","d55f41ae09ca42c33bbe39db949f63edb982eb2698def5511ce57c4f872a5c0f","6036173d1fecc6618a44f9a6eac2357cbf937f65066abe2621a2b8d1580705f1"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3123541116 · entry 108e9186e8c5677ad86d…
Expected log hash
9205615d16e6f0d1c04ec96882a0dde4bf091f63aaa636cea18cbbe885fd5227 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791346951310","kind":"published-quote","locale":"en","page":"brand:delivery-much","quote":"The packaging was perfect","rating":5,"review_date":"2026-09-27","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6d3f7b9a732a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.