Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“já estou dois dias sem resposta do suporte”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3198797320

Proof data

Record hash (SHA-256)

3ad9d2ad62f8928300cc82ad70c7908aeb92e27b172ef2435be8129331761207

Signature (Ed25519, base64)

cdpsrf9R4z2URbV1+Z9uXWpUYzTCMS5iPhdA1t4TcW/Kd5Wvxniw12InU3nZcwc+oZFlESEJn0fyUqNKbNZgCg==

Merkle root

199738dc68b66dcf66f6b0cc77e2cba74c3bfda88989684620837b4c4e64818e

Merkle path

["3ae111cdd7202ba8792ae640e1932575bf93719da70340a6205052ebddad3121","579fc4154a521cf1ca21821efc9433150a7ae0a0093a90cf032aba2189f07f8e","edc98c2cf64f2a00dd8df774a4e81f231bb35c45732089be61f4181351c5d5b8","669ed329836a0f38903ec2cbd32873fb9240d2296397b4aec7e4d8826b221379","03c2ce5b11fa0cfbabbfbcf82906a48017e6a31da193e03817df6a15acda781d","4846683a0f5e50028462e8767cf460361e13a35d9b43abdcd281d716bf5e6114","2faafd6739bcb662b8cb9bd69c19742cd982866ccae8039dac59ad9d0c6cbcbd","56d42c68cb372356e077624044d087c4001b7fce8ae3b3a3698652ffe0b1fdd2","af5c137bd67fadf1e044394e81fe08260ef85d6c6fbeea680b117fbaa48af0ff","8293318547411a11b30a1a0bba2556bfdc840f7cc646fe10e8d7279258655cda","044d29ea84c64121195ee0232cedf7d4633096d16816562b08b68059aad62a3d","c2efc19050cd51016477281115d61ba0bc460759f5adf7f1bbe5ac7cd5d2bcae","89c2d1ad10f8da8a1ced326bfbd1f55882866fd705571bc337258b3314dad42f","ddc8a66e59fc8f0934334cf08e419f621290129e658cbc58d8ec27bafd90b0af"]

Anchored

2026-10-11

Public log entry

search.sigstore.dev, log index 3198797320 · entry 108e9186e8c5677a14ba…

Expected log hash

46227e67415cdf5b62c43420eb8b7a80b35acaa912410c2711787f678b77c9c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791687727006","kind":"published-quote","locale":"pt","page":"brand:delivery-much","quote":"já estou dois dias sem resposta do suporte","rating":1,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (199738dc68b6…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.