Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app makes things much easier when I'm hungry”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
833b1b8555f1ca29582f9cfde04fe65bdc3d0ca6e2ab640b24b800018db6a2ba
Signature (Ed25519, base64)
kdED+572gdVK4DBAicdJ9jI+Gy5SZ7gKcBfFXQYZ587Dh0J2mzwvn3VGcGhMAuMY4BE0vvqCLMSkEVAs5fcZAA==
Merkle root
ea9653d48be6468e8b38c47d968f49528ccd17e229f6df41b5fdcfc232720ce1
Merkle path
["83369fefe980bcaab8ce7d38f6dd4f7d2fbbd10e1de4cb6482e3bb3f3dc5e376","72a0b67fb052b5f49a84ce04625415fee13b8151ab709c972a2caa38e4b6aa56","9760a4e28d9c75e36032a1b70a6958e039958a8f82e128d7b19ce95b60c1f9a5","737a683949d4b31f574bcbe1bba1e3c72473f0f1bd3bf9371406d1800585d4a7","224c6a77a2239539c92bd4f5e71a2c97c8d38b797959b92f8970f00c23b3e22d","5b1dd4d09efb1cd3f9adc188d0333a2184c2bb8736013124bba2a258f0aee6eb","81bbdac8e59774b0c77e65e3eae5124800216157cab8fa026d85876a6b4bb098","3cfc2699d5890d7860a99cb0ef27fb2aae6bbc82d6f1b19b58dfe5601f6ee0ed","9721c6b1c4af3a517f0191a7c4b2feab4cffed4a5683028479f9f3e12e8f3cf7","2fd6877058a84fc72b94f55c882e4afdb06ea09a3693151f2fd81fe6d7a53b1f","8ba46993c70476f84738be8ce5e9d52ba6f714db67d696100a2f57cbaaabd32f","182421c42f44dd31e48e89ae9fe9f4260b76d70180e539225768fd2a073069b6","ccf8ff30a3103bcff522ac20eeb7c8bafaced0c8bb22a4b473e821c1f5835c20","941e58bbc56b1efe09a1b494813fe84c02af0a34c4d123d9b4a10e3358002128","142248530d485121153c09b780e08c6af592fdb4c333042d3cdd9e4160c6db55"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3162767972 · entry 108e9186e8c5677a40b3…
Expected log hash
ea8f60b663262eef5ec0ce5a9fbc0ace913092ea47c37bdc70ac392578ea0c35 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791541525227","kind":"published-quote","locale":"en","page":"brand:uairango","quote":"The app makes things much easier when I'm hungry","rating":4,"review_date":"2025-12-16","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id1207090602?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ea9653d48be6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.