Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“aplicativo que não entrega nada”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
100c8493c50e52af735e2a40dcbb18ad8f55faa8db73e8e6446ee48156e19a24
Signature (Ed25519, base64)
DXb7fvW9mzrzJ9NWb12tGWE80NOUBqXz93sFkKIcxZldwnxImO3dd2lUAUbx3eX47Jugkx3z7cN3iFnq/8wuDQ==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["100ce4f7ec380122c5721685dde18233fc86c83880b6fba62c28582ae41172b1","38ba043a6761d6ecd67ec49edbd42197fbd399f8c188773de2842475a89b92c6","e1dd23c6f4e59266cc2c4b4f19361c72b2da2306b068ff197683e5c38276d8b6","23b32f788c6e2e1922bc0f83273348e62dddbc2013437c9eda6b897dd609e5ba","701d0bd634d6b3bc7780b35614369f0a241eaa0345ab03f623f2eaafa1b2c07e","db2d074cea3a055adc6d4e1f775495a5070f8f9cb6690a8f643984aebf9474d1","29d6d5ca722ac215a0e868bda94a1db65efabe6a48475e1579168d4f6204a686","4ea205a69297279eea44da4e047d4238e21d9b239e57b3c5322ffbe40b898995","424f2170a1d17982e015b34ee7b50187700c6a6ed4609e8b614db083fde98546","01a9bfbb0f481e99c1ade0eb90f02af931606f6109e84709380f0ac1f18ce813","833e7f1721250b0408a91890c9cdd334d2c3b183f63d1b9e218759aba1c8dcc6","61b4a662f53cd70a1d757ee9bc56bb78b4fd6673936037a47cf8f48b7bb4419f","9428e24b047bb9d4ac05b5ab6de36e249e544865747a9fa357ea862bb3060151","c4a4d8b2a4d8c0bfbebb4916fd7e139c5aa71a08248affd318e33dfcfb90fbec","b39bfa02188a075f3ffabe31b61efbaa34ef7a32306f491e668efcd33d84ef4b"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"pt","page":"brand:aiqfome","quote":"aplicativo que não entrega nada","rating":1,"review_date":"2026-09-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vanuatu.aiqfome","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.