Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I am always kept informed about my order and delivery times.”
Google Play · 4/5 · 2026-02-07

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2890214870

Proof data

Record hash (SHA-256): bc2e031cc42a9d1ca1a639714f4f3ffbbe1fb2d651a2e9a84eeb2e49627ddc37
Signature (Ed25519, base64): mRwfv+yZy88pugjMBTBieF2sshEzEy8NFly7143KNlF+QVmxINvhxB17pJKDuvJs3XRYRietCH4r5lRlIDjTAA==
Merkle root: 04b39eaa56e1cf8f75dc8eac18bf6942167c8418ea731a7471223f0be60e3e6c
Merkle path: ["bc2eda477ebb005f9aacf0bee87b1f95fcbc963ce8d796c185295c321ae5a089","9b343fd7ff53ce6d1c2730d6e41b1be2a04abe7f72424f67032ccd446a8f4844","f6bf1048c63c8d4b53f1ceb7bc2730dcc58451fdff295809df8dd95ee9aa0553","84098fa36f6c57bd3d9ed953b022a7664a1a831da8f6e2b5842314bd8f0c0f27","78528575e3e759f9758397f83a424ed048548cc01caf26e755e52402cd6f836a","f298bf6917babbcfc6a0aa7bc86bf29a44520c7608067c7ebbc8ea643f7c149b","4fc0860c9d8b81bfd136f79356700ae8872bb4a808f748e09b6f1fe265dfb58c","36e23e4b7600977598528a1af4b713db875b5b943fd01e08bcc92beb423b99c8","e0b1adea7adda4392ef94bd690663ed6ef52d5383def041a4bffefb7e3f248a8","6e10bf513b943f6c5008538b0182daa79331677d5fb95d97de48fd8d8d2a6959","72ab03cf0a054e0fdc289f854fef48f1de99add79408f163ff324c778af2c860","e27b6f0d2a6e378ff36cbc28e04f11599bd9917f1291e082191342792770949d","2f760d0f42bf27702bb03975eaf8d6ea5e036b0f49b2fda05a97a4b8e2bd9942","8f074eddb198349108c1e544aa98c8c80e756f627b29b4943cfd74cb3331adf1","3ba88b0016422cde319348a72d81ed01eacc4bd155bae80b5c4b6ab6d98a745f"]
Anchored: 2026-09-19
Public log entry: search.sigstore.dev, log index 2890214870 · entry 108e9186e8c5677af53b…
Expected log hash: 1f3acef0f063246e051bf412e40f4279cb96ed334ff7b0647a13320c1b31c4fa The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1789722569406","kind":"published-quote","locale":"en","page":"theme:rappi/communication/en","quote":"I am always kept informed about my order and delivery times.","rating":4,"review_date":"2026-02-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.grability.rappi","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (04b39eaa56e1…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.