Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I was charged and the money was debited from my account.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2991846025

Proof data

Record hash (SHA-256)

5a6de7fe313dadca1799878fa80adf2546bf1880eb2341b6b3b45c6a1ff909c6

Signature (Ed25519, base64)

5aOYJw0KZ0xyr65tMvRaJJxULz5yFdaY4mIHEm5LKg7P9lIiAFiiZuswm9GznuEiYEWJbnIdYkUp7vDT7uw/DQ==

Merkle root

d312d00ed6ab2beb6e18f20d8087ad3474eb8b04b26d5ad949e9237bf3ca4c52

Merkle path

["5a6f1b752b437823844b949045c7e1c627efa637c4a40f9d7ee0c3a70b8b2bfc","8a5bd64ecb206dd8e078618760148bc600983798ddeaac0bfdbd9b59498fb6c0","93e3b616afc566828b5f5fc34dbdb5740cf13e5ffd0d0e06d18b5230f35301f0","74d3badabd10cf334251ad8d0f3d6ffc36cd18a6dc17accfeaca16d973ffd912","71433753aa95c5d23b739cc3c0c939aa6df442b5417fc8d8734a44b0e6d74534","70db386b02183f80cf11d7c28ec42f4fd91379b9cb97e78bad2bd258b0173962","0ffb5b9fb3ad8324007a93a307e4525782207db466924de8771828315c4145bd","c01cf632a4a1c21fae729dcb562e97d965f287a5bc9ef3fd9d6ade3c0f9b0a81","8cc15390cf8419c69186dbb9c135608482d93db186b6d21e17d90ae86989c8d1","ae1c2ea89546518a2ab3dbd6b322b114231a5ba795403a088de4da30e1931aa3","c7847c3a5ef6598ce4e9e7ef7e7eeeb3f54861ab4ab6bc8f92aa06900ea3ea97","d9a2307b56bbfab2719b9dcccacf61ece3062be0304bb3de49788024235554c1","d54e12ad25196f7df567d5e35a8d4808db0f8ccbe5c48a2fcb5439caaddf7c53","1b52c506e73c97f5d2cc9d574137c52cb370bf5407bebe9b32056b133838b1ec","2fe1a36eecbe6e65e0243c1a81f5f430e558c99de7c492361bda367e122fe03b"]

Anchored

2026-09-29

Public log entry

search.sigstore.dev, log index 2991846025 · entry 108e9186e8c5677a5f08…

Expected log hash

321e41cd200068478c5cf6f353f00dbd75153d3d8a640e241b1a6e8e4f8ac2ea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1790574513694","kind":"published-quote","locale":"en","page":"theme:delivery-much/billing/en","quote":"I was charged and the money was debited from my account.","rating":4.1,"review_date":"2026-08-31","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/delivery-much/cobranca-indevida-e-falha-no-pedido-sem-estorno-e-atendimento-inadequado_fDVto8RPx3bJvRbP/","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d312d00ed6ab…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.