Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Excellent for ordering food”
Google Play · 5/5 · 2026-09-24

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3124493015

Proof data

Record hash (SHA-256): f13c2b63e01e85c5a5c5f5d65265a44e15c9430d8780cdbc08fa223481eb3a0f
Signature (Ed25519, base64): EyW+2CeklcZ+2VeZcxEbvtf0iPSuahxTYs9IGIcVDBTCKWeBQAZQdVKuT7CQEIQU5/mdZysEWdmE3B1Nlbd2Dg==
Merkle root: c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22
Merkle path: ["f138ee791c2e17e04b107662c0a4424e4dc89e4279e17bfb6516a648d42d0de0","5cad23c4ebca9772335bbf0b9bc6e6e175dea494af2eb402cd964c7e98f46564","e33416f12b24dade7fc6d0465e38388bcba557a3666f8ba1316865d215264fbf","0c489ef3e768268d52da5f6149cbeb1ade025e9213d79e44f6d6bcbf52c0a06d","faf15b5f49d90da82d999f3d5775b2142375c9610e1048976e80a88a4eee8143","ad3c121ab4c0be0072f3474c9cc7e764364d9783d708c71f1094ddbed9490c2f","df75f6d27809ec7980dffc4c1e1d5b69d395e86ab48acebe113d45722bc7f8b4","9b3630be1f13853ca9ffce3b4aac84014bf95f2cf44ac71300533bf7e53cb2e2","5d9af3f7d0cbfd21c65d0feb2f91a49771fe49f258109c9520b736a14dfea867","b4fd9a48398bca82f474fd6bf282398d425ec5e9a4421bd0fec93fb699458516","0f89b62b00723a59fea1d35fe82c2cf12363ef8c44cb4c66373b44b6a2c27b0b","9bc6da086d9d773db2319296816a5122ae6243df07b38d1fe16fb0930243c226","4f4a409828316f3c6174f93fc95756b3e0d7370426e1385dc3cddbcd4e22522e","dac1c339b376d49b10e240bfb32d2ada460f1b51d5428b7290189b662873c331"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…
Expected log hash: 0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791350987184","kind":"published-quote","locale":"en","page":"brand:delivery-much","quote":"Excellent for ordering food","rating":5,"review_date":"2026-09-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.