Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Great delivery app”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3124493015

Proof data

Record hash (SHA-256)

88aaba4609ddc52c55fe01c3efbfe784e18be2b9847263588299fbc0a2453e9e

Signature (Ed25519, base64)

rcudlLSZEWbQHBk66w/YlOioCG3/tQnZaNqL2SzbiY4G/yHRyckFvLbwO/uAZ//RMmRU2pM0gA1P0nUFe/rFBw==

Merkle root

c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22

Merkle path

["88ac09914a7a4d51a61bc90da4d1737d3db13001966c22f92455656c6e022707","9267685fc58ba4dbc20be69555b972212e0b90c8dab0bc081b29b44dfb1516e8","367ab4670bcc965604de6ee0f1f7285cdacc218a1ff4cbb6a7521b2ba4b61ef9","229abed11d8d31a2bf0964e68b7df3cf2b09b6b6cea898691613517a24000f09","a6ad7a71f2d4e9f1fbb05fa050bd8ac8a435cb79b11e13cf803e7cf989fdf157","04f5612a5d09325a0226d2ac14d1c61e182818bb8b10e2aa0f86072834a7cd27","661cfdd29b47990821a565612d443e1026813a814cba051936f18cb52874045a","174264fad6af616672817678a243f3001767efa2e876d3fc28f5fb2ba20f87d0","3761add135853c0b930df20476633e987e054b2d09e9788be7f8806c508d079c","b71d702460e82ed214fe3a337abba75dfedebcf69b00d9959ac361a1f9f61e3d","d369924f72960fc132f480251b0ddd9c47ffb07afd030e4690931eba59ed5cee","0ad80f67975c5817dcf8a60951ea0a77997efcadfa302167c41972b61504d842","bdc886b04b862f522fa884232ee2802dd3e2158164f68a6191101ce8a96e154e","f6587866cfe871330a583b5c544cf843720f2355e100491ae5892f3b03df89de","0cbfc145d581a4c4b7198ff8f397c34cb4ba6263e9e9892372f878302426dbe6"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…

Expected log hash

0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791350987184","kind":"published-quote","locale":"en","page":"brand:aiqfome","quote":"Great delivery app","rating":5,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vanuatu.aiqfome","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.