Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“a facilidade do uso do app”
Google Play · 5/5 · 2026-09-16

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 3221102617

Proof data

Record hash (SHA-256): 4ad8c50c83548d8f3335960f2b1aad0f135a768e3896a2b8a9bf9eff2e70f294
Signature (Ed25519, base64): Hz7P/uxrbc03Tu3xdu2lT1lhIV2r/DSHej+EEf2qFU1/8rWw6uLdYK832ynUQSkylI7IQhISkKNhuS2Uec5dDQ==
Merkle root: 0eabe705d05480191badde562bf975cad5c107b96758d59c47efce7f02d55f90
Merkle path: ["4ada2cf5d0141c020107bd2e8fff7d743dfcec49c4ce28c42bb18428a1e8287c","addb428a7ba627289202e551bcb4621e98c9664e1fc09368b789043bcdecfbd2","25e4221fe69ebc218a423eda98f5ff901ac8a762906c7f46e7617348f9beb546","284e85a01c3df859d754ba801ec2317bbcdaf296984e43de61dffe04fb418071","8dafe462ba9ba8738f1f3b563859cce8be67854b7d1a19e36c98f5298a36d1d2","f8ce851643f1c81f927d312a641de5e5f38aa341345930f2a573036ea326501c","f4dec573ef0edf029660ad646c4513ac3c7afac7a0084fef21274fab071c8da4","97e789d9a67a621c3862fcb90b61ef7b51ae58c85e396dc036206c3a9ac53b80","f8f2098ec8caf7e6b46b72bdc4aa56784e681e1881b94de97a85e7d099cc1c93","0ccb4cf89110b9a6b2cceacebdc849c989bb629f86e2baee051c0f94321e20d2","37cebafbdaece907ce52b110f354e5fd5cd4584044908befe829d2d91f05f191","6856126502c2bdf383de7d34a707edad30552e4f450e80b531090a991b3c5439","05681ee1c24ddb2c2974b8f09b67bdf0f585a1101ecc93c336a755ba8369addf","2e4cbc8181996227b6c5ce6cb00a4128780f0a2cf8618660b840716e64b4286b"]
Anchored: 2026-10-12
Public log entry: search.sigstore.dev, log index 3221102617 · entry 108e9186e8c5677a7ec1…
Expected log hash: 701a9a476cb781c93a6209c8572d258b6cbf70f6f15d478bab1da1537af9506b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1791779915538","kind":"published-quote","locale":"pt","page":"brand:ifood","quote":"a facilidade do uso do app","rating":5,"review_date":"2026-09-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.brainweb.ifood","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0eabe705d054…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.