Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“the establishment does whatever it wants”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7e31189ec9e5c605fad2c6e496a462bf082699731f64bc3dfa2173d60156e4ea
Signature (Ed25519, base64)
3ucLbZC1liO6C4XTTw2NjTVgeZSPWpdfFJP3/E5sVg5vwj6ndREi9iwtDOrpgG4jZ6GCnfq8B2IV+HyxMsisAg==
Merkle root
47aef0bbc5d347d2f064428fd7eda9e99f7cea2d49004267bc87db0e45c42023
Merkle path
["7e3367ab7643d2e9d81861520dc0543e7034417b735b0ba4d75469a7363af2a7","41d629e81e97302e84bbd4d823e0152bc7db63aea1e3f5921c742234c6ac03e5","87e627aa353ac1123c437e14b2c83a71ae29011228bcd10ff70788c2dd689a9b","ade4f7a87d9e989f836def921555f3a77d064c996c02728257b98c75d62f7c53","9a4cc9f1b8f66dd299d372244db7c4df46877a35025d33a8e7cb9f021c8bfe12","b1cc334a61b2778da9c6fb1ea69466c574e16586ac749eaba0119eff919421d8","9691488f4c8f711b57fedc2360d82bda30fcd57d400a750869914a6b160272ec","f8ead4e050e6e135da5a489bff0a2b19e5b35a7796c9ac26ad67390c31729191","ce3b4f67107c22f604728ad337c59a66369da4633ac75bd739a52808bba59eb3","09dada1621177f391cede29e7c3c317cef372877809e62961002b19dbc7d2317","06ebf99ccf4cc762e49939085daa67a883d9e67648eda06f883fb23c994f81fc","0f76f4b2b498b31726aee664e15e2f4cb43427245a310827425fc83a88ed4963","92eb0b51de1a71094bc2c4bc0f12199312f9f1563f5315889f1f7c189098208c","ae4b3d1db66616dc2ed116969d740c25ba42ba2e5f227f9b8268c3a651936ce2","681b858a978b3dea64df3700a937a058d6290a8e519185bef8ee7388d7739dda"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3162173160 · entry 108e9186e8c5677aaa5c…
Expected log hash
00d82a97e8d5da8f3bb4a78d598390d6b030eb8338f0e0735ffde6aa5047ae68 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791539060014","kind":"published-quote","locale":"en","page":"brand:quero-delivery","quote":"the establishment does whatever it wants","rating":1,"review_date":"2026-09-07","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id1357804341?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (47aef0bbc5d3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.