Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“The first one at the time of purchase.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1096e84e35850025e0cb75112dee6c1f09686eaa5f4066c9a511dc5a5139d1c2
Signature (Ed25519, base64)
grRbUD7umrEAyaiZxhzijH2eyMiC+TxtYynt555IzBBtvYf8zQnORR3XqGO4J0s0PbuQpZqUHEuvzE8qW1B3CA==
Merkle root
d312d00ed6ab2beb6e18f20d8087ad3474eb8b04b26d5ad949e9237bf3ca4c52
Merkle path
["1099476d725408fb32c1fc518163fa293aec041d577de621da3b2b3c1d0d9f7b","900c99bec8bd56d4945284233a05310ef5daae2bb9d7e8893c058181266e4b1a","8a3f5e3097d52df645d59424248e8034d446f3161aca99f6597b186523bb6225","30f02907404e753e2bf5bb833a6d62725402306a2b3afcd16d67cafe3477528a","a7e1895e60d0536e7edada2709f452abbedd88850ac3190791efc2978ed1212b","f8380e1c93c795d05c46d11481381125c4310777fb9854c1b2ab1940e107401c","4a405328fd88201f051e58af837ff72308b6631fb8368d2ec559ba1f6c8b911d","ecab4959f84ee601af0932820f76eaf91576abd34f391ac30c7a8b9fb5e2fd6f","57b876c5566a5199a8fea110a694c6f0570446d011319657604717f3533d734b","5c7a710a3b3a7b2891ac7a6d6378525660d2c25aba2776b777126c6bb3bc5794","3fcd28fa1949c84c0c2fd7d8fa22c0eca816b69a969467dd993e55729642a121","15fba251843ed75b21d7a706dcdd46a992571cf3f9b39ffabe5e1383ad473217","6a3e717960ae78d5d2813a0e2f808fafa517c2830be7676aabdf067e5e110ff4","c979fe4edf99bdc6f66f54b8524194d66725def21e08cecedfbfba469c82e6f2","2fe1a36eecbe6e65e0243c1a81f5f430e558c99de7c492361bda367e122fe03b"]
Anchored
2026-09-29
Public log entry
search.sigstore.dev, log index 2991846025 · entry 108e9186e8c5677a5f08…
Expected log hash
321e41cd200068478c5cf6f353f00dbd75153d3d8a640e241b1a6e8e4f8ac2ea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790574513694","kind":"published-quote","locale":"en","page":"theme:delivery-much/billing/en","quote":"The first one at the time of purchase.","rating":1,"review_date":"2026-07-13","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/delivery-much/cobranca-duplicada-em-pedido-e-solicitacao-de-estorno_NtDeMbtMUQoTd8tA/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d312d00ed6ab…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.