Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“com péssimos atores”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6ad192b1a2f48fa58fd9058709cdbfe66c56c29aeffdd33182a6e2a83de57061
Signature (Ed25519, base64)
QPOS7Dvu8rAYjqlq2jo3795nX5mIGJ6DNG8mDyDpQJx99Ss88LtM0swHQ89z25beK13y1zSrEOfY4Tzkrg8NAQ==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["6acec2b558099d0f4ed3ffb87404edf42af12a6243dd477eee51c486fd9e7145","f8183c02a0553d71857f71bd72ac96c06500a5bc2b098b01023ecc12945a7ff1","3411d66e686d2556cca223c1e08dbd778049716992660e732d0fbeec08370a0f","60d06400fe0dc3605c12adbc9233c598000ce59679397d6d046662cd747e6676","077f9ef4ddaa00ffd26773bc32b6492278993549f9928d81b835468b3849e44f","6ddcc512aae3915a745a6c63e62369ee751c18a86c048985f99b3c252168c1b9","b68e95dc5455348cf20f3c4766edcdc00fdf5c90aa23f71a76a5289225e53c8c","0446ca89b9b6530c258019235146726279940760fb6a1c7bcda4b01bc4591158","b9f8a9f7fbbcc34756e06d8e2c4f3122aaa9b7c2eee95f3294c1a2d5ab189d7b","e1d8cea487997859a4a1dc4317fe196a4498b52e7470dc53409139c1ba9e4f08","6efe54f33b5390b665c39161dc4b705d09c7980b19a75e00d49f37f110f6da7d","e6b35db6260df9ee7ad85916623e6fd166d1ba2bba5bd38aca915958f4905f75","06d796a3b8e297c2eec8a6da440c9f9c6b9ce7c872dda1a86e5b18b3fde38aa0","faf75fd6bb73a751917db6b8d00819eae7e29d2bb6f9270942a28e0da8dab05b","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"pt","page":"brand:aiqfome","quote":"com péssimos atores","rating":1,"review_date":"2026-09-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vanuatu.aiqfome","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.