Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I love the promotions.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a36aa50fcc62c6c0a4f17b8b46f3205ec362d8ce67bcb69455a8b0c4e070aed3
Signature (Ed25519, base64)
EdUC3MbZvt/5zntm91UOuo37TwD9zLneq4D4RYjJ9B2cfBjNyFeFFRpp0r5o2EVICBfKd59xLAr2nY9fmp9KCQ==
Merkle root
277f678086a68384187ff29b395b0fdaceb8fee69b57cef3cd060bcd7a85a6f2
Merkle path
["a369dee2627417a38cc051a3060784d9d55b8b186ecb34ed93b337b91ddf6bf6","666e4118ff76df281c56ece229d1fbc3422f53aae30088fc342c3ad3e8bfbc7d","4dabf38870e5212c461e2bd5b2572079a0b06df0a9b240aa16a91e52054cae40","44a11b7e1d882c8a27b99c00793954b38d346da74ad2375555a6f4b2080ad9c3","5f6e4641389fcf0ae3a0c5c1fcdcb5d90282011f6152d515e94aa47ed43e9ef4","c79506cf5786259f2953fac4d1e56c206d8d236cd5a4af9bd02281ea53e31555","97dfac579227efb7ed562126fc1a02f6446c664f68a1fa62528f4c28138e65c8","6f207923688ca338f77c85f00307fec390ece0743b95bd6d924ed954901c99f6","846415585a8ed241a8c5d224de9e1450c3f85f744c974c376ca4f769a65992dc","68aef3c7ecaf3133f14f701f2a513c6f3e0a1beb2535fb0d7e1b4644e4d3a93b","61b90c5bec015520a93fed3ec611a4e6916645770507b216c12e8ccb7d079a15","d046eb0bf36080da0db9d15c31b0c36050d91d8321edba42a422de4558edc2e9","47bcf17e9d39d99398d6717a5a1eb275a9b2ed23f5eae79a9d57d6bc7ac6f082","086e176eb6519c51f791fcd7d1f1cf11b9af8b1ec6cdf6772acb83e13e1da912","33f0c207136b5e5f15198fd5fee5ac8599f8163ffe39734a8f7f2847e77c41f8"]
Anchored
2026-09-24
Public log entry
search.sigstore.dev, log index 2929513415 · entry 108e9186e8c5677a8264…
Expected log hash
9e91de35fefec2dcd249a303ecf0c84a118a9b2cf5b39f5a9ff4368de67598cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790137911951","kind":"published-quote","locale":"en","page":"theme:ifood/price/en","quote":"I love the promotions.","rating":5,"review_date":"2026-09-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.brainweb.ifood","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (277f678086a6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.