Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Uso há 5 anos e funciona muito bem.”
Google Play · 5/5 · 2026-07-10

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3139760477

Proof data

Record hash (SHA-256): 2c3662bccc265f7e9c3d505a59e4f88bec7f9795a91af0687ac85b78175277bc
Signature (Ed25519, base64): GKWjRrLJxZmADlKRSjEh6lU6IHB5n/nVutZb7PHX3q4pAYdlRh0E/YzG/pU9ZVBAAsK+2wbU/yo2/s9OC0cUBA==
Merkle root: 49133e6803d24035baa1544a5c730db93dbaf832df48f680ca855944337404a2
Merkle path: ["2c3723dee80d7eabb6c34c315936806c0d57ccbd3d0cbc1714c5c0fa84409189","fa28e153e46fd69a9837f2edd0f8f1897b4bda67addba2ec963ec3da091b9c20","d308de812b10680d025819baa7238053421024eebc2a095c56b375b8813ea6d2","2c1dc9ec431b7de5e9502df289316481f3fb536ddd0991cc60bdb442f4891341","adb6b104451ff955708411f8c11a3b9f109f2fb982a5c8b73a19f6ec35a26e80","a342d1fc74448f0820c89618f542dd60fa58013d054bd95241becc3d31bdcd32","b6434eb4342706f5b81b98553f36b9c7a4fc56ff302c6718759e9676d2182b00","200cd147991da474fe3a0b501e0e4dbdcc9fd813f78b585e4e6d4382c73547c0","933148a67a2f8dc2470873a21886a874da8c650647b68bcd10fb2013214e58f5","2ff350a0b665d3f1742c4a72e07f7efc613039cab1fb1ae34b170ae7d7a2ca41","6feb752f8bf8a62ad7f87829a4654f3913b8722ba868189c75e83cc0b3bbbc4f","3fab624705af963c8b90d8ecca330b0aee40203a806033b0565c84e0ab95e53e","da05ecf7377d5697c026f830a74de1a09359f7b60612fb722c789caa15cbbf29","90889d6ebe241f2d2f9092870d002ba795f7d27137f7582a09b4369ab1517327","d81f506ca96dea712a8b56759200b270fc625cf496d323ded3475eaafeb2d916"]
Anchored: 2026-10-08
Public log entry: search.sigstore.dev, log index 3139760477 · entry 108e9186e8c5677ac88a…
Expected log hash: d54b6e5e20903e9be29e6a5973227ee9b3dbe61bdc0fa6481a5788472cd5976c The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791428432986","kind":"published-quote","locale":"pt","page":"brand:rappi","quote":"Uso há 5 anos e funciona muito bem.","rating":5,"review_date":"2026-07-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.rappi.restaurants","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (49133e6803d2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.