Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The app has gotten much worse.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
ffd5b833bc4b315ae0c22a407fe40568d273e88d08b7795b2c3d96eeba14d9e0
Signature (Ed25519, base64)
MiflSEqHo0p42Ck9hksWcExGSh2b6OaqCCXoYWb+WgEsi7i7I304+QleS/MMDGB0o7D9jXp2oCOdcFhSsEPUAA==
Merkle root
52d6be1abed15ebd0724a0e1a493d5805e1ea49ddcaf8e9e5584928cd3e4d759
Merkle path
["ffd6fa7ce75989b1f207185f7c978d28c5f1e34601b84e2cb822c26b57a5d15e","09120e061e5d670cac0857b579070e1e95c8987752ad6606fa32b1d7f95d213d","edf53a42919dcab386672dcc66fb8032c7ed4b29005e461571522d8899df7dc5","2254574e919dc1e8ae5cb415619f66e30321b2f50842b280732aeaf419a48385","6a7ba0b7d0fd33d9387bba0fadabc13f5f787d5c964c5d85a8f13ce76500006f","e3cbf6fe88cec943eafe65fd93545bcef98bd88aa6e0e6644b9813f90cb35204","efe8673ae597940a0f85bb4fb70c8a3146cf73818c6cd2c21d6ee23352021426","c2e8ed0e74b89ee64f2532680b42158bd2bbbaf76c680c96a444c5f43719a6aa","7cb84359192e028d47c2f77b22567b86414a5de8a82935760944e8314d6e6698","f9bdbd86d654e67aa1973a5522e4d1215d5ceb20dd23ceea608cbacc98bf5e0d","6cdaaeb423ac3ca9e71d9b6b7eb5dc348e1fe6f5917591151d442780b0e12a0a"]
Anchored
2026-10-08
Public log entry
search.sigstore.dev, log index 3140475820 · entry 108e9186e8c5677a78c2…
Expected log hash
bb68bef30792bf00f645df162a48943f770bc3f026216a44dedb4651c8ac0917 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791431489246","kind":"published-quote","locale":"en","page":"brand:quero-delivery","quote":"The app has gotten much worse.","rating":1,"review_date":"2026-09-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.querodelivery","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52d6be1abed1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.