Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Always very well served by the accredited staff.”
Google Play · 5/5 · 2026-08-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3139760477

Proof data

Record hash (SHA-256): edda265f6b2c8fa74a93221ede3a44b72aed056ac7ed4690c1e752d21f8a4411
Signature (Ed25519, base64): OB/VoSsl3Na6V80oms/ubbbHDN27R5V8gqbCNSn7TQUoIFaeVLejRX4t8vGAw+0FmZTEarZ5GEHaqCFfnXr6CQ==
Merkle root: 49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path: ["edd96f8f37bc615e826b2145f62b1169cb7c3eca3e36caebe6d53e8ce792671e","d4b9778462c7d97662b945d2b1f151edf50eed565180696a0a2fc6888ecef63f","704d8acdf4be0010da087825e1976a37d1b21dab7fd52cb4f0657685866cc2c4","8b90dfb0c04701b92ccfab372f721c489f44e53667baca9e161e26523fe671ea","5c87b6eb269bfa62d78b2c3849a014b2548fcf9f31d7f09284eb7e05e3eb9074","c00d493534ae001ef6a1d93a16503c70894ab8c863d4458ea7597d6543c8dcbf","d39f2f2f5068fc492fdfc3391f83e6d14f3a53f09f16bd2c0eedc4166596fb79","930ae026b732a96f4f84f2f96f69e4eb662b84753df69e89571a399451cc4efb","9dbfdf318af561e17a7e7249fd90e6d275f2d16c29d0a786e1d886afd1f24941","c78727fd18cd6e7a0509249b9584605de0dd9aa174b23873fd230ab29b40ed5c","d3dc20716650f839c9eb217717e3c8f0c0b2479172a2479bc6011ad7701ed7e6","3cc595f5376b7c6152362b2175e27a950acbbbf3965898d4ea5be445e3165082","573e30281798543ac2707059ca3c966f21958c0a972fe6cdc3a54117b3829e49","1fef2eea1ba7233240a645d2d99dcdcc4e3841bf30f06929c9f12592e46a0c14"]
Anchored: 2026-10-08
Public log entry: search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash: d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791428432986","kind":"published-quote","locale":"en","page":"brand:delivery-much","quote":"Always very well served by the accredited staff.","rating":5,"review_date":"2026-08-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.