Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I loved the products I tried”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ea4182b21a4891bb80395f9bdde4cf4826908d0a8124aa37f8750738a2d2192c
Signature (Ed25519, base64)
ci264X7ao468/jLjNFMMejO11pQM+7O+bI6l7bmwSBXIpRY10j/5d1CQAp9Ku45Si3Afe5cVlRdHhVRD4JS2AA==
Merkle root
0d7fec37eb7aa7ca022c461398d36283692153bdca7d5292b2302abb6878e5f6
Merkle path
["ea3cf4699e13530b11c508d0257ae70194f4de7f244c11e598f95a45eed64172","d35515711e51fa57bdd01b9baa87cd78e026332d8ee0f9708fcfc3f9b64201fb","d0e4de5895e9f8111fb0ef3a9b34671bb7df20f460e7c259cb52a714eb4e42e7","98becd646c826d19e89ed0ff2417bf71b38fcd4c03a3e5f111dc881df2752f04","b1cd6b915430d85c4b90a582e92a64d3b1807097f99b07b4612de0c17b89e4b9","bf2a6130500ce26cd5aad5859e7b4904ee2743503f51e9bd6b01932df92a1946","c5f133898e9340a05fd63cef3d53ab2d6082844fa248387baefece68fee1576f","8481f6833fc69be1ad68682c317fc9c89ff660f09c74b2732c47c21a85523008","c01752d07e5a22a15ea46d531cba89d2d1d683c39d4c80cdcb7f405bb9c02d52","aa1aa2b41172714a41e208fcd5e9fc8511b9461df385f75ee44210a915e92128","5b76c9b0e22c8059058db9120e9dc09437354691e26154d68c9ad05beb6b57f5","0fa3a575da66b503a77291657846b5daf13a9e496754b0b1e8eea48517292775","956e9e262109df10194605d76388d273cbe98f6754d203b26bfbcbec8d5e6b13","a5e4945621803ecfaa28b41399735783919e0518f2827e7f6aa82a6ed0687d7d"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3126883925 · entry 108e9186e8c5677a6678…
Expected log hash
7790667e260445bf729ea3061132c2116b163a0e0b944eca343c9e8408350ef6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791359818972","kind":"published-quote","locale":"en","page":"brand:delivery-much","quote":"I loved the products I tried","rating":5,"review_date":"2026-08-07","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0d7fec37eb7a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.