Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“best delivery app ♡”
Google Play · 5/5 · 2026-08-02

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3123908662

Proof data

Record hash (SHA-256): ec53687cbf2fa5a4975e2f0c47bef766f6977bab1e3006d2e8d32d3106ca2f42
Signature (Ed25519, base64): WVM5WO+Yre+GJCLwqoRUsDiwoX9XrSFAyHzlz6qXvZSMZYa7Q0QcmVgAG4K7Fqcc99ia+uG8aEr5sMF4f2WTAQ==
Merkle root: c53673589b1f41937342019e079ee2c0ad1635342b5b2a41cc71894367084fa3
Merkle path: ["ec537e853f471001544eccdc452de217b2354d87f76022d2e64f1ace7b3b6897","6aeb72df3795e4b3fe06fa68729acd77089dba5f1ecc77bf5661bbd6dd51e7bc","08ec1753758fe9b1d56dd8b0507dda3f35ec791c40585e8e4d6fe52ee4190d5a","d43ae0cfc9b474b678b8023b5eab470cf83d1516aa2d1c25d6357b49d63c4d1a","25ae48c5ffa1f8c7d5b26f85455c287818ff1495a3c49ad8fbbf38b74713128e","9e509177ed8e7a9135549d38ab49002c2309b1b713f5d884446ab73f85ad1d1d","c8a6b5bec3b633f468fb9a209cfec90b741e0eeeb4cc56be4f24d62217852537","49019f85b63962bc0da8dae4a6f5cd388989d74c8f3213f0771d6ea634b4022c","755bf24b7a085d90bf88706d5789ec12ab32d59654d47dd92cc3cf82ce1de4e4","611b1fe570afb33641fa8e5d86ec93591a2b0095a6b47e7dfb007c0ed03f9cf1","a4c24ea411c1146bcb0fd3ab6f6d96cfe0c0ce0733993440810de800a7e58356","6e463be5f42b16a166dbfda8feaac737cc0fc2b2361b5ec875292503df8397d7","7a50bbaa74dc72157cc791442bc1f4313c283e49c9af342f20608dd7e776cbac","ea816c3f8ecd74fdcdc9c068bf36a30dea5aa6d104e982532f9e8769ceaf3fff"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3123908662 · entry 108e9186e8c5677a51cf…
Expected log hash: 5372e71f27172d067b5d688f48846b5317672647da39397abf474cf22aba0576 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791348381030","kind":"published-quote","locale":"en","page":"brand:uairango","quote":"best delivery app ♡","rating":5,"review_date":"2026-08-02","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.uairango","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c53673589b1f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.