Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“quick responses”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f46c0a12e6a22ffa30d2ab3ffb0e38242a87eee97f8a3d4fa285e7ebad8a26e8
Signature (Ed25519, base64)
N2Dr63GKE7H81uXx3sY/AMXgl5O0HIlN1s0Xy0q9k+MmP3snimUPCOduWC2CIcd2bAeZ4OIbsqYojaR9lpX+BQ==
Merkle root
7e5597bd3c162c8b6d828ec7450367f642ce11ee386de414b88376dcbb621ae5
Merkle path
["f46c021312a18806cc1e27b9e7b575d7f979caec4b368e7e62a17db244618372","63692e468233af51b5dc19a957d5c4a5f58a95aacc63d9946a6f2a97f526ebc9","ebf6a346c6c38c2e6fc982e1d9a76ebcefccf5c63d2014a9ef2764a746de7dff","47612f468c87e4a36ee5bc8c39eaa5a16855a8a53b031a491daa418937ad3ef5","8441908a7f74f6b4b6d5366e71e1e302e06b88a7e23b1e67fbc3573bf1610f18","65dfb923e6815b798969232b29f1a821bbec3ff10cb596d60686d28a99d87f37","f23ef62a4d91f7b05581f0e9e729f24addee005158c58c82ab299cce7a1efe23","02d8d9ef4bce0c125c1890dd8b325656766c57d7468893998fe1ca8a2ce8f818","ae3839e8b3e743d0ddae6a98f8c64e4658963a50c459b2da0e89f038a2991201","88e9b4050ef9c575a026421e7452a672e7954c2f5a1677dda49956360a135ac5","e406b58f907eee264fba5bef5c53a1eaa0c1a813d7d0fb0b9b05db467600bfe2","712c122153f9e368549fe091086e305fb889467475d7dbc10f66c46c3ec70829","3fa77f30bb4ae3659981dff326c7b1ead82f840aa815dc4f4cfaa848f2034350"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140627354 · entry 108e9186e8c5677acc98…
Expected log hash
82c9bd063e624267c60865e2416c3d714724e2c3b18c4773424cdf17232dd6f1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791432333296","kind":"published-quote","locale":"en","page":"brand:quero-delivery","quote":"quick responses","rating":5,"review_date":"2025-03-02","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id1357804341?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7e5597bd3c16…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.