Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Confiança na hora de pagar no app”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
54f177b775a9c8f141899931850682011f083c19b65188e6de73dc821fac41a5
Signature (Ed25519, base64)
zMVloWxYrE1Fyk+3o0z1uKvskQykkaJsnMwz7f1Xpe7QcmjWc32EjU03zRu1EoOe1DvfyNCU0Dl5wwrOVpAECA==
Merkle root
274a7762154bd166543ff3cdffd566852c7127b7d67c5c835965884725fa5b5a
Merkle path
["54f31fd81b87aeaf44db9f5dc47168620a7d80a34b9aee7a0c61a324a96be39f","a8412d14835534b93a0ec26cad481667b603c7e68fae1293d9ab431467cd0da3","d74a524ac7de6644c96e80696317b62e592212eb17cbbfb41102a4718ae8a458","d30e3cc522d3d24507733e7bd1b60bb4a5654ccf0150492f4132b1483e04f879","83c13202c2338241b08cada9a9c751050de17f8eb199d9990790121638cf8d7c","3385f1f209fdefd77b12d5746fe0ddd8b930a4e86026a2ffb61f48eec935fc0a","0c58ca5a97e39c0e50ac8365fb3de474d57ef3ddefdc4e0f9af5de980e63a394","ac31f14c24c7f4c0b1c0009f6f414cf1678484ced873a423351fbddf3ba4edd6","c325192313d05e38dc749bc32e0fd860da6fbc495d8114bd409fd3c290d1ffcc","3fbcaa48d7df66f74fa517926c2671a9310417a99459802e7266ee116de14972","87797db5962136b9af2b3d6913c3e1a93b070307dc49c0474614ff743c756067","4e9e9bf46c43d71ed5302f960a878d42b37361bf495c828ceaa24d26c51bfe56","37e0bacf6aea102741ccf02dcd42b0de6a02c60397ad417aaaf9cff69daaf006","29e5b66d9f235b4df92caf0fbc75cded7863ab76bbe1924bd45c3ed8fea27123"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3240911465 · entry 108e9186e8c5677a3a8f…
Expected log hash
75e63ac56a22d308ee68ec8d436777d2fa26c934f80384e53bcc94d01475e988 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791863907329","kind":"published-quote","locale":"pt","page":"brand:ifood","quote":"Confiança na hora de pagar no app","rating":5,"review_date":"2026-09-13","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id483017239?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (274a7762154b…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.