Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Order not delivered and Pix payment not refunded by the Uairango app.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
2062c0c6538ba95cb8fab1c05b54ef7f82ec672b1ea48fdaf1e41197c4afa45f
Signature (Ed25519, base64)
K7b3Fp+s9LY10+XvW0v4klyJf9fPbQ5AB0y1SwD/4XVnf3vGalxMCeoBBcRbaijv7Vs5E8IdOsPqgpwZmOrDCw==
Merkle root
825dbc6ca55f00c6c81d8de0f7a080bad31b79dfa0e721dee7ded0e9c294ebb9
Merkle path
["2060bb974cf8c9d08ccbb088ebe46e567c09620fd81345de25d13c32191c62ce","9358f986d7b7cff2aef9c299108a94be7df63ad28e62bb29d4ffc7ba8124c12e","dfd77a4ddbbc53d17d8c56c21721707685e8ba91ad365f88f4cc4b34eb690839","96f009b509b9daac913c6308fb9769f26cd6d55cd0054cc587cb8eb30bde1476","9aacc21b0ece8ba0c9c708eeb1c3a45fb43e0f6256d29a7129ffaf9bbe79e6a9","dc0f4b06a8a50b3d6afd55a0f9a2af9fd5d98cad296753663ab49167e105602c","909410b0597dea410b3694a083db8ed8a63211b18113aec833e0796221f184b6","8c43e5d4b2c29d54d3cc2d2f163c1515a47e6ae27449f169eeae4bf9f2e11d8a","25f3b41ab0ab34313a95339570e3f19484eb553fbced7c390878f7f6a785ece1","a57443d871f46e626754946f83f3945dc441e8fbd6fe7835cf79d24455c7c9a9","660d6a765109c39ed132fb0afa3dd507047c73076af21c08ed678d2a0c4157b3","9c0c076fec2f0fa7c1094b4111d2e5cedc7ac35232c509cd9a25439361474b1c","1e2e9420d8c4747dca96dc342727525f4c47cf2390ef42ad69829fe37156235c","04c4bd8a9ef95bf5648c9d023612bd1f2446e83a6dcf83e612d031a5ea30e90c"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3240422411 · entry 108e9186e8c5677a0ea4…
Expected log hash
8667b0db28913263098c19cb6387cf64b6d68b1b8f2c4242d3139d96cef5da0d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791861703078","kind":"published-quote","locale":"en","page":"brand:uairango","quote":"Order not delivered and Pix payment not refunded by the Uairango app.","rating":5,"review_date":"2026-08-18","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/uairango-delivery/pedido-nao-entregue-e-valor-do-pix-nao-estornado-pelo-aplicativo-uairango_06WlC4KDfuFPer2V/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (825dbc6ca55f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.