Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“orders always arrive at the scheduled time”
Google Play · 5/5 · 2026-08-05

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3139760477

Proof data

Record hash (SHA-256): ff2907dd3970535808f4df06225e494f4a11f6d95ebbe244f95ab784d8f8a30b
Signature (Ed25519, base64): S9D/S0MOsf6IAr0PIEZ1T5hGpK7lrelWYKEKKKN2h7U0KZPweOENlsgCMZFwBIamIIRYyTEnZ3lrM364vW8HDA==
Merkle root: 49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path: ["ff27ef3b7b715d3f45cea1ff2588ad5dd1759cbec03e44e0d47c20801e55217d","08b4fa9123ba6d9e3bcc7d1da5d539a80dbfd1b12a964a69fce6e1b744ee11cc","ab95cf77000fbf9cf3ad439eb60f6d6afd166c28d175bd79d96ba248542c69a8","3efdc4ca22d9e6e659ac668522f784a7dd3d9548517b3d3016b6c8ed8836d818","d77a27f424db68bd4bdaa5aa64cc578665b5c56d553f6b66eefa8f21c5c65a43","c0ffc3df36ef042aa4afa6706993425bf2096ce8cf49b4cef85b6a4f58a7b189","74e89dbcdbf9d9025de67b6efc2625972baa60789f511628620a090a10318c8b","9b64a0172b6a174e9028a2eb4d8f07bc8d94464dc72edcc5940c69698aa299bb","74db413daac5cb92471e1d3ffd5c0e5306fc09c9244a0e5e8911fdfa1213d4bc","1fef2eea1ba7233240a645d2d99dcdcc4e3841bf30f06929c9f12592e46a0c14"]
Anchored: 2026-10-08
Public log entry: search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash: d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791428432986","kind":"published-quote","locale":"en","page":"brand:quero-delivery","quote":"orders always arrive at the scheduled time","rating":5,"review_date":"2026-08-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.querodelivery","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.