Quote verification
This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.
“aplicativo que não entrega nada”
Checks (re-run on this request)
- ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
- ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
- ✓ Public transparency log — Sigstore Rekor log index 3140475820
Proof data
- Record hash (SHA-256)
34ec440b7a39f28e5b4486376a7c262c4aceefb885118c6f801fed2ce42b69e5- Signature (Ed25519, base64)
IdX6V5aL1ChtJBOqw7+1LRqQTPpw6gqy9MNSpXDpxI2POAVo8eOABs1B5enh9WES0gRGG0cyEXQUJhAhBvV4Aw==- Merkle root
52d6be1abed15ebd0724a0e1a493d5805e1ea49ddcaf8e9e5584928cd3e4d759- Merkle path
["34ec5af57f0dd4b1c561486e4b54a837d052976222eba05d5d93e28621fe1fd1","2981a6788a2c83f71f6218a436059150ed1cf5e5bb1b1575756d0a2be93a490f","322c7b37f91842d6d2197135a8fdb853f6768e831ce6d7b5e7211cec112b73f2","3362dc9e7772b400863b3691b4f03f9345675ddf54aa2fd5fdc893f62e52a199","a1a1554df57aa4b1f90df59db6bb5d60fa2d35abd3107eb9ce54d0d9121a7829","6780175948d314f52fe5588267c148d90eb74af212ddfad104c281e5404ec10e","ae6b993c19cf908eaa447d52f9aba562698f4353b2038ddaf5e82ba692a03f3b","088d1e7b433855f501421480015aa2f9b1447b5ee6a430b982f30e1010d5e45a","52fda557ef3cf06fa967611895bf84104b86a705024e9adda6e15ef2b3cf9a4c","289cad591ae911a08c0ca0fbf9c9a12f6cc99ac6990372a2e0c9b60aa812baa0","c67dc7fca61c61b16137341961c9542a3fa1b3b9ab190b8e61c4c81fbb9a8084","56aeb0e656c2a392422771790d44a5410cbb9aec8acccfea2a8189e399650e20","7bcd5a7947a92a6dd94070d36a9ba6ee3547a773e1a98d6a8e599913acec3ca4","71d5ef7f970539b9a82546e0bdc1b1069245bf71351875f786a78e5550da4e15","b72fcc24171828b3fdfff6be65bb433d37b8e51a187739d27a216a784d84cf36"]- Anchored
- 2026-10-08
- Public log entry
-
search.sigstore.dev, log index 3140475820 · entry
108e9186e8c5677a78c2… - Expected log hash
-
bb68bef30792bf00f645df162a48943f770bc3f026216a44dedb4651c8ac0917The log entry'sspec.data.hash.valuemust equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm. - Canonical record
{"dataset_version":"v1791431489246","kind":"published-quote","locale":"pt","page":"brand:aiqfome","quote":"aplicativo que não entrega nada","rating":1,"review_date":"2026-09-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vanuatu.aiqfome","v":1}
Verify in the public log
- Open the Rekor entry (pre-filled with this proof's log index).
-
In the entry, compare
spec.data.hash.valuewith the "Expected log hash" above: it is the SHA-256 of the Merkle root string (52d6be1abed1…), which ties this proof's root to the log entry. -
Decode
spec.signature.publicKey.contentfrom base64: it must equal Citatio's published key at /.well-known/citatio-signing.json. -
The entry's
integratedTimeis the independent timestamp: the root, and with it this quote, existed no later than that moment. - Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.