Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“We were left at a loss”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
c0cc2408a35ce5679d1a38e1716043e98e84a174605fa5f59a5b7c414526b5de
Signature (Ed25519, base64)
ftIqUabsC1km2qiuBA7dIgR4Go9fbUT4p/Wbip+KqGk0VF+hQW5RdBchW9aXcEbFXn0kzzthVdwP7jbFenYsBQ==
Merkle root
400ee8bc8bb6e48ec8bd5ac7598e893e5cb7545daceec4f0578b6b1d061e7911
Merkle path
["c0c95038effbcdfa8481b922a2e8e1643e427db717425edafcd89c56f2355623","00fec97febf2c2c7195b3a7faa6799396fae6cd27be2790507a0bc66c449ab17","1e2f9d25e83bf9179dfab41ff5175b64bc265796584ebb4c12e09d2468147df9","d5476cc577e81a35fa59a77541b5dabe7c638393b8382834804aa2a16ca1e2d5","37480a36a85791f2cd7a4b7f924ba24e282e5a4c4e12614564759fa4729d7f07","0803fcd114765d4fbef6c84c8ddc9ee9bdaa72b4140b8cb871a99f097c3a520d","4c829f1d880211d9bd686a836efc125c37cb44c2ab5fa9913e8ccfa76f9a885c","a3410e23d534a0cc4654f83a0e7544e69c0ea25db76b37c153bb82e4a44a770e","c33f79eb6bbec6e404e3c73dfd3fe070593c89d0420617fcebc183c9887a4ad0","ec5b54ebc7b6e2cf13bfdb60085cb2e01b481ca9f48c822458550c99cbbd2d9d","d0e6bbb142e55bbbb437f9da843a80474016de99f20d543643b0de72fdaf422c","443ff0883ab60b9bdef31c9104c1800064867e4fc96aa4aa572479e6d819e99d","440a969b77eea7732103e570c7520313223a72c988fddbf409cdbd9ab0fc9e51","727572d95b19a4ae886ad98ad495d59fc190c9dcfd7deb626018d1393975dd03","02d2fd729874a4045685c92de04d21af3989963c78ad36afea7dd3264421abb8"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3082153890 · entry 108e9186e8c5677a31d2…
Expected log hash
cff4076b1696aa395d1840cc38c433580d1b7821d298d64e1adff5db6503370b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791175845570","kind":"published-quote","locale":"en","page":"theme:ifood/returns/en","quote":"We were left at a loss","rating":5,"review_date":"2026-09-16","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id483017239?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (400ee8bc8bb6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.