Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“GOSTEI MUITO DESSE APLICATIVO”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
821677b87db53535debb5275fe036224f7e79a7203faea65bb8d889607cfa918
Signature (Ed25519, base64)
7oV8siZgWW5jeEpkSAobiKiQVvO2GoV+TlEA1P5BuzWNbQF+pggDhWj4ZSmFtfRFz1lPB5F2SfDiVBPagUqaCg==
Merkle root
ab8d4de5853e13d360962f03dfb915842a42e1c5601cdaac4f2b37ad0ba96b78
Merkle path
["82178b8c48aa5fe1f08df91c6fedebecc3b295fb3aa7eec37c31bffa1111cdc3","4a73051e84196523cb4f48286207d898fdc7c1f3ebadc59e122c878f15f49091","06c4cc83ca2c8d386ed660d38f2b46e1f6a5f6dd0596a6de851f693064b868bd","9c2c77addc21201b3ea5ee9eeabed2c7ed372624d538800a1a311af95683e0a6","8b6f9473f00d48df632ee4ee8bc3d383f8650b6da8a050e7c20e75f98f9b5a0a","4c81a98916858d41a4094ee1966802cf830cfd7179848f2ea374a04c9ccf0b91","902085353a0336084e9a84f183e0fb5f86b209eefe075f61a0a03b6156aafca2","cfa6fe31218d0e999f955d6986552e76145f7a335d70e5c247f1121769b98f44","13ec82dd24437978c307b2ba7e81352ca3c99d4b9e723d0b9e376a40e6039dd0","0e53b4d892b1b6dc159df2e408a75b947dc419dce019bdc8c663e8428425b3f0","cc67bb7c3a085e7a2a87b59066264b7450f7d774ecc308dbfdac0d659b5480c6","93e44b3dbbfcaf98a6be29ea53aff304cff4e33fb3fedb84a699b27feb749bf8","a179e4e628732700a4c05c1a9266dc0af0d4f4ba9e65711ab678d5064556702c","0d65fb7d6fb1f6bc88b73078a53833894fc747e8876cdcdc40319714cf650cf8","90ac6c76618b09f3702b50a6410c80828bbcb4ead0d9d85dda294a654717f483"]
Anchored
2026-10-09
Public log entry
search.sigstore.dev, log index 3162293789 · entry 108e9186e8c5677af0ef…
Expected log hash
49c1b9c7cf9c0180248092c94f6cb48d5e59f6c65f471decaa61f120e90874ce The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791539611981","kind":"published-quote","locale":"pt","page":"brand:uairango","quote":"GOSTEI MUITO DESSE APLICATIVO","rating":5,"review_date":"2026-09-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.uairango","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ab8d4de5853e…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.