Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Nunca fiz conta no Rappi e não consigo criar uma nova”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3124210377

Proof data

Record hash (SHA-256)

23bb49535bbff138957463ce4f0427baacfe16ada752e4c98a358d231dd030f8

Signature (Ed25519, base64)

PIwV7dQOqno/E2CFKb/f0vvqm/UxFSg0Msf8Psv3z4aaFkwwn1wnpX8jkfAs4JzMtefy1pKvBpANo0njjANdDA==

Merkle root

3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f

Merkle path

["23bab4b408bdc672f864cb941a4009c938ed5a4bac0623f411c42aa1970d6cc6","9e6cb0ef324a15d6ae2d1c1ae7c071d873132f298438c780ee3e67580f8e6a26","c7f7b0a716555ddf391a8bf0d9c65081cdab4e6a198e1085cbb027c9bdad1810","742a8d08837f6136d3003a54cd107ed900804d4661c830a0dac8a23b09330ee9","4b1f34f0aabc153e2132f98cc7633d244c0ac0f9df94e889c2a9925131902687","c2f588f9d31a76b02c3d341e61102286ff0ca7d1b9778f3114a887b703e3a44c","1456aae678d3840b1fd2b5e8344e5a1196aa5508d39035cd2f47c878f7737ae8","12fc0582bf907e5ae70001f668a21f80bc8f447f08d5ab42f794cb374e2a5e76","da7f55c3bc13e92d1ef3f59defaa73583c96f1bf3b6033884e3d2c03331005de","5ba98a4248a3a723f0d770d8476574d5d28d9bb0af332b590774381c93ee4cc2","98b2e614d1be1a4a9a8a69f32af4e367b63d1fe978efd546cbe8df49f34052f2","4312c1ac93e9a28633e1ccba91723fd983cab402115a8acd8573e15d9ed9f630","3b28c91ed1c07c20e7a9ea170d94b917c6d123814303aca3f92997be066c952d","e448e4cc350a9a69a05538fc74a8236040fbec1cdf0c4908e91135fd4a29e380","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…

Expected log hash

20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791349684588","kind":"published-quote","locale":"pt","page":"brand:rappi","quote":"Nunca fiz conta no Rappi e não consigo criar uma nova","rating":1,"review_date":"2026-09-17","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/rappi/nunca-fiz-conta-no-rappi-e-nao-consigo-criar-uma-nova_khqI7G2TPoqw9SUH/","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.