Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They added a payment method with another card without my authorization.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4f98e172886c1939ac590ffc2cfe8d39ed21df11d38cb05b66fea1429d6ac1ac
Signature (Ed25519, base64)
BrihRXlcIvc2ESWlqf1iIOvLRi4TUodRPY/sHlGNkISiMQDoJIEPxHVQItlwqaSAGY8ULJP/UqprLeEMGnjTCA==
Merkle root
0b0c0499033d3f9b3953d31e6c838f88f12988dba810dd4de44922e1b60fcdf6
Merkle path
["4f975c23d3383e16073eb42fcc16ae696b83810c5cf8b2294ea83fd0c319c000","dbf786cf36ab42d826277ab0960d545a45b618838b1b315c55e36f4be93218b2","8b776079fb0f341403379ec57518c2aecbb33a4288bb5b8db2e9afb3c31d5e3c","c1e965096b8503355619af1ab1196f6b31fefe124b79ab825ac6d8f7dd1df7ad","e59fbfa67accda76cf7c67093ee0a2617b1504fde9a7fd9c42f858886687e891","fa5cd4f8d05da3273f27196e1b7ece14d70e06e5827cc7d7fe79fc7d35f574d2","c28617e2812977e7bdf38e81f6661642116f008057e0e267146715016f4827a7","e673ccb30f16c95e1594fafbe3fdf60078a0093f16fd2f1f9cd0c9287686819b","2413634da996f5716d13a5a721d8055a3277aa10b1876eccbd738f87ad247ae8","e3b98167ef494237973c4c9c8e6621d2cbcba3bfd7fa69657db019fe0a25a38a","7799f8c2e12ebebec2e803db59dc1771942abeef133b5e16abd4958aca8176b3","a2192486df88d4dc6da5dd9f9fe72a80fcb0210cda38213ab9466ef5ecabcb4f","fe7751fa4b9a0ad43fe0710628b6cb1b92e12eb8a60d9f17eb0c0764d693577a","8a05b9e19287b30c7fb54816a1fb848939f3f2c84b9825f19f342683d5db13aa"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3241084060 · entry 108e9186e8c5677a3e82…
Expected log hash
a291e2473f1a4510a666e020d4d424e463d55bf4677b91eb5a52e446e5ff1581 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791865115768","kind":"published-quote","locale":"en","page":"brand:ifood","quote":"They added a payment method with another card without my authorization.","rating":1,"review_date":"2026-09-17","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/ifood/cancelaram-meu-app-e-mudaram-meu-cartao-sem-autorizacao_cwo4WMYEaFYN92ym/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0b0c0499033d…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.