Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Recebi cápsulas erradas para minha máquina Nespresso”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3124210377

Proof data

Record hash (SHA-256)

417f1c083b357faf0477bc8185eb21d78f831c0db29b5b2f02471ea475f8e3a6

Signature (Ed25519, base64)

DC5nx01l63H28vlx9BEQx7HR1Js13dO4M8bOvvc7nDS1hUtBxFN3nU4QgCq0NNNV2jKrt54ZclAaEVoveRbKBQ==

Merkle root

3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f

Merkle path

["417f92cc3bfcf2c9bdcd976e3a8110388bc132066a024e872b18c6cff7c163b1","3206f6a31b7399ca5f30850b971ca52dda9cab919f5d95aff6a1f33df6dedc82","fb803b7d428647ad810610724fdb49e86a084c540a09ae253536f8d9b2dfacc4","136699b4380198fd32c9047e5d798fe24e0a2f426795bc5f9a119bb839b49328","4bc543ea991189fc582ba76c8841f5bc60b433ed879081284fa7d12367e17ecb","8577232b9c1b9da6c9c64ca636392b60fdf22e022645785359aa7d0b9e003aac","7f98efb1953b82cdbc263ae5e2ec43dc1434e039ee4565ed4209a8b17475c59d","7f2eb7af444d1e0841d5c877778977edb81b0dd68eef19515a9a167ebd3bcb5c","6bc11b04aa6aa119c8c5aabcca4f8aa54c3b44e82da3347384d24e5bc8bd6d64","05bcf261b9cb33dc5fb88351ab26f6d5e301b95a4af7e3afc24e170ec399b9fd","db9aebc22431b53f80b36c8bd046b8b1da925def77abf5908f7c7418ab019051","5aaf377ba2f3610eb3813c5d4a17477535bef8901a867f444e496223a3d0c5a1","833f715febd1c4a136edb6739ec6554c0cc550753cc4001bd667664cbfc7f50b","e448e4cc350a9a69a05538fc74a8236040fbec1cdf0c4908e91135fd4a29e380","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…

Expected log hash

20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791349684588","kind":"published-quote","locale":"pt","page":"brand:rappi","quote":"Recebi cápsulas erradas para minha máquina Nespresso","rating":1,"review_date":"2026-09-16","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/rappi/recebi-capsulas-erradas-para-minha-maquina-nespresso-e-o-atendimento-some_-Y30oA1Cp_NeOug-/","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.