Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They gave me a 50% coupon to return to the app, but when I used it, I got less than 20%.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2991846025

Proof data

Record hash (SHA-256)

a9b280e175a607bf129423c95aa1ad75a81b2b1ceb340ce6eefca5034c53a7b7

Signature (Ed25519, base64)

YTnJl4dnGUvo+o4JzyaWpciGi4lAtmSGlwktOdhATqJ75lRVr1cflF5BvUgom+ItFbVRc7o7DIlf7e8UQi6xAw==

Merkle root

d312d00ed6ab2beb6e18f20d8087ad3474eb8b04b26d5ad949e9237bf3ca4c52

Merkle path

["a9b3dc40f8cc85ce5cc06dfaa63509042822a4c9b349746807b97290da350cdc","a1ecad5bfeae10faa6b1474f1c06a336b1bb69f046784e52f17f64d79ab8101f","012427eaa93d995f3fd2ad700970a0583c1038c817097fc3936c9a64007e466c","7547ae7a18f509f9f58df06e1c58e6f4612bd619ae1ced9aa99a292201b524d5","bedeef2fe3c6d8757ceec50019628f228bf754bd5ca0e02103c7d03af2c9512a","b830f7facf02fc1310209270c6a70bc6fc5df9938e46913d758d7cbae73c7e7a","4e1d6cbf9bd4a3bce2b33645c145b4f4761e5151f1c5fc6ad41f5becb4613e92","7577f4fd591f10225bffd5f5a05138172d3076e0520d160a65c7d87cd3b491f6","f31ced1cd3d9b1004bb669283326b5f7e0ac9df2e21f7c38f730d8d4a308f995","3398f8b17a9ebc3b2a76593834ef846efc801bd8c6d8c51631677ce1ddb2257c","492b8759bf926e2c61f0f063086de8b3df3a81074c02164aae8e5937028ba844","2b3375ce3a7f55604f62fc17691f141c491b203281dd4c57b0a10d23bc506c51","8e634408bef90bed917b0ccc8b04febd9750c86f8fc48f4eddfd28684443b20e","ac3e8eb9a4dcd818facade9f7856ab850324ee2662bf990758158396deb094a5","799c0ef4fcc26840c2a1a2c1ea34f7ce94ca70a3893bbb37f42757477cf242fc"]

Anchored

2026-09-29

Public log entry

search.sigstore.dev, log index 2991846025 · entry 108e9186e8c5677a5f08…

Expected log hash

321e41cd200068478c5cf6f353f00dbd75153d3d8a640e241b1a6e8e4f8ac2ea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790574513694","kind":"published-quote","locale":"en","page":"theme:delivery-much/price/en","quote":"They gave me a 50% coupon to return to the app, but when I used it, I got less than 20%.","rating":3,"review_date":"2026-07-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d312d00ed6ab…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.