Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I paid R$35 for a sa”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
19b4c51a0dfb08d833d3fe5e04ebe5d7ca175a2d1dd62a9a71e0c04cb28eee33
Signature (Ed25519, base64)
HIPOjZf3mxcfFrN+8kw+XiPxxp8OBNEy4RC9eNttcbvQRjXe+tRGXMJXwx3DkLr3BmsccJc5Nnhkl7AfLn1+Bw==
Merkle root
2398b9ffe5a3df5012483239ae50d07265a8714a6b9a03ccf48b3559c47e03cc
Merkle path
["19b23cc5ee2f1b1b75c7761e6dea9dc0242ec95168d8fac8f48d31970b6a461e","809d3951dddc7f1fea92cb1c38760e40fd5c136b39ed6972e5a14090e27859ee","443325ad99f2d15889768fcc53c22d0a3861359bc1395ae3ff23c221bd542ed0","320cd131765b27d919140f3a04b8378bb4076acf34125f73784bc65102639a5c","5798b08358bfbf9996617f3c2d740c31d4aaa5acf907a3ca69e629090af7021a","be5aee26bcb35af6f0b8726407c967b5c6aa46d2d383b3adff57a7780c758aed","28fe280c5a4a9932340c3a236df20cdcc5eff6c7f04b4f3da0ba0bfa05a5cf76","76e9b7b86d4f3598a9f3dc24237c57a209b94a8d2dd2af44f8923f6d778900ad","1dbc9aca4515a1597c19af4c2cbc771963dee941acaccccbef5b38fecb7f3a4f","0060a9d0204afa146108afd7c471dd439426ec51f9eed1fc598da8bbd67ba42d","a505e83ead23bb585f8c086da9b8f713935fae2b0f0246680b2710029f91a4df","3c9498483c19a648725a0d444d70aacd539e3c6670689e94505e87b6aa5f9803","69e20c73bdb345f66641353c13ba7e73f98bd05396ec371f55992c40dd6b22bd"]
Anchored
2026-11-03
Public log entry
search.sigstore.dev, log index 3666689888 · entry 108e9186e8c5677add57…
Expected log hash
081173480bb584ab401065f32774d38ee3dfdcda0f372573695ae49a257a2dc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1793701859167","kind":"published-quote","locale":"en","page":"brand:ifood","quote":"I paid R$35 for a sa","rating":1,"review_date":"2026-09-17","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/ifood/paguei-r35-por-um-sanduiche-frio-e-com-poucos-ingredientes-do-subway-via-ifood_GHpU3JScMBxBivcu/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2398b9ffe5a3…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.