Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I didn't receive my Rappi order”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1d05377e21e55a2e8ff5ee9d8fc842d281e2408cdb4092a1b7fe5877616b36b9
Signature (Ed25519, base64)
84spC7EAXKxoVp3odeVh6aX1yLsRud3D4f6SFUQh7BB/Xri3Nn2lMT9COA8dqGzhnVxq60i9CFKNOVMtgsVKBQ==
Merkle root
c481d62412848235567fda063ff4784e8e49df41ad8b5c570de24ba396415d22
Merkle path
["1d086b7125a98e4533f5b1d6cbc0544a4b4b80d33452427e9faffdabdd215efe","4d49be9ba648abfa661a3f952efcb80c030ca6011ca22e92907e5fedd5cee116","5460394e7a4172ef22903b1744f0aeae52e17054fc3b490cd0faff9d7d6ff9a3","bdb3f379d7ba4d7181cf1b91baf7ec32ee2025e6b680500a6607b32472f858e2","6e111a7ce8c8d9b939917f2618561f36169b93817beaaf4dd2bfa67dac9862ad","20596168577d039987673f4fa2c15ef516989e4f6f2e23db70b2633ed16f00e5","a25b225a9a4cd62df9462efc90b11125008371f91c110af2f2379bcec2a6afdb","9d4baa3d6446890169ae5fd55a33a9b5cc514abae72c2bf30dd909ec9f7d857c","9c5b224b00898c5b4e63d9defb250b5b02d9d2c8e0f15ffb9351c24708dbbc56","1dd6ff4df437981a9454b67d0f3f9397a64fc11e1abea8d67ba08be975c78156","64dee079392160926d13bda82f8c0e7e42742adf214a1401f48cd8349e353ae5","a8cfe7f15d1cd89003b8fde2e6212a989155550fe06bf9628f8df7e8a0744bdf","818f0135095488afaa32256706f222f09138af7de4410ea79d618f621eaf5cb2","ed99a4b837bfc052822e7d0dbdd9c56431a87e8600550f5deaf9f7068616c82e","0cbfc145d581a4c4b7198ff8f397c34cb4ba6263e9e9892372f878302426dbe6"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124493015 · entry 108e9186e8c5677aee70…
Expected log hash
0056b042c00529af1248b70a0a2fbed761990dd7841ea722369c29a2685ea6e1 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791350987184","kind":"published-quote","locale":"en","page":"brand:rappi","quote":"I didn't receive my Rappi order","rating":1,"review_date":"2026-09-16","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/rappi/nao-recebi-meu-pedido-da-rappi-e-fui-cobrado-indevidamente_rCvB63N3xSoGipj-/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c481d6241284…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.