Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I received the wrong product.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
5d28fd64d6f5f372b645bbfa94300e84befb8bf2f7d06c7fb60f55f39de99a03
Signature (Ed25519, base64)
qn7XBCmK0UQLwmBmabpKjWKEtgDgKo4LyZl/kb2dTqpV5GoM7HrTWJcl5Yt4GdD0JKOWJTs/EhWQ3Vm6EFFLCg==
Merkle root
1da6cf8d96c8876e66e82e9bea7529c76d7e25eda1c07550505caa1baa49c4d1
Merkle path
["5d25756c29d2fb948dfce0a77b5885926f47e153c237452aff712e0d80ce23a1","f405494e8f51db1577d78c831140e34a73ffa5218c7c5af88c3967624e954a54","a8d14e441db11b6d49cb4b593944a6f4a1985b72bd87b84c0ab780332b58fad8","a8c067e51ff8074cb57a7199d1e7633665b6d74af5168c78ce4ae60e346637dd","7ecb123adef502ef38ea929ff9399a9c043909500bae0e339b26f5c7962808b5","672045e7dbd75bd485c4267f0f406dfc8369dd8ce52f8763c721ea7f6347c896","32a266a964b72dc5afc1a07a340c2364ef3d4f90a0f5d984b8f645acb8af9b0a","3554a686228ba9b1e6a13a8aa48287e7e925343b8458df1f685af30370dd323e","334267d555884822b74da7905286a6fb2599a93808fd5cc0c15a2f6980a3d90d","a8c63ab6dd5999dabcb335c62b132f4f98efb4f2fbeab7593240a04ff1a190a0","2b6026f90b2b0395711ae812dce1ea02324cc2eb480f869b0a2158231c8362dd","76eda94afd6dff76491cb745d6bfa2721462c0548c6346050e3bb99ca410e599","ac67bf501008dc802730ae80f3009bbd0325863ea1a2b21a8ec83ac8c2b4ef98","2d81003ff1cd2149e42eace973cb0f4cdd39b653f7b06a20804a1f1025023ebf"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3240367269 · entry 108e9186e8c5677acf8a…
Expected log hash
f6397ecd2b8639a3c60345d0c567eb602411c7eb1bead248c760bae850816087 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791861381931","kind":"published-quote","locale":"en","page":"brand:ifood","quote":"I received the wrong product.","rating":1,"review_date":"2026-09-17","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/ifood/recebi-produto-errado-e-nao-recebi-minha-racao-petz__NV-lIf4Iucn0znd/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1da6cf8d96c8…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.