Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“obrigado, recebi uma resposta rápida.”
Google Play · 5/5 · 2026-09-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3124210377

Proof data

Record hash (SHA-256): 40c824fb840392b9c414a4661779ec558dd0b27376a065b04b4c4e5e0de0b05b
Signature (Ed25519, base64): K8km22wGVOU4DjF6r+agKprYp8eYeZlB8y7ziECKQL1fmnh68QKZYnMdyEC+RVDJyMQFIVIrMjkf23yqSv2DCw==
Merkle root: 3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path: ["40c78d18218057a82c6c50d074298d2a7c77b4fb015c3db99b70b385cdbf70fc","816988ba78ca25bf28defe0a00c4e027da98eccc62d20e4fdcc8bb251c4156b3","6120139edd624a094904edc1e83874ca782fa0fa288e092c1894c95c4abefc88","a4b3bfe6b7e1c4238b2381a2cd557727ea2744b3962f313bf614b5ced525d96b","d9827eadcbedb473654753808bbf85d34caed3baa27e10846d6d8a846755c868","ae1f2ebb880f763d9b99c74c99a5c2c5a2f05b98dd9b953676cfaa3966224013","8b58e730d2d28059ea99b6f030ce359383e454e5dd3a77efe96780c483577318","eb0718d05886a4d2976186b3d46702d20c8c9698c4169f0d194b737afa6ba4a6","2de2961db9f3dbc114befa012785285a372d93f6a2cb16fbf1ebc793649506b8","05bcf261b9cb33dc5fb88351ab26f6d5e301b95a4af7e3afc24e170ec399b9fd","db9aebc22431b53f80b36c8bd046b8b1da925def77abf5908f7c7418ab019051","5aaf377ba2f3610eb3813c5d4a17477535bef8901a867f444e496223a3d0c5a1","833f715febd1c4a136edb6739ec6554c0cc550753cc4001bd667664cbfc7f50b","e448e4cc350a9a69a05538fc74a8236040fbec1cdf0c4908e91135fd4a29e380","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored: 2026-10-07
Public log entry: search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash: 20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791349684588","kind":"published-quote","locale":"pt","page":"brand:rappi","quote":"obrigado, recebi uma resposta rápida.","rating":5,"review_date":"2026-09-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.grability.rappi","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.