Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“muita demorar nas entregas”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
836cc43f6201d79564e953c7944ec0dff8c826ccbc1c84dcb335261a2f32c860
Signature (Ed25519, base64)
MYm2zYq2zmm6XmtFb9DEtHZWfDM8RmG1o8lk2z9LYNkVR7sny2KMcAUXtGzYfKv2idGzS7Vc5+wBbyb/0uz4BA==
Merkle root
1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6
Merkle path
["836baa14bbd59e0f878cbd7b43fffd1724e4dda26987a0c91f45411c4c0551e2","8ba003367318c1546c1532b3f9735e89ee894149200fc220703552db2b355232","7386a8f004f831e896a05a8b3683889f8faffe3f47083913a1de6b51128b287a","e8d8577f7b83ebbe86c7d7c3ae3008587c053639248db6a73337c4cf0d2ca134","a05693ea0953b4c243518200539934b6b16a4e45ccf004d4112b287d21a18e15","69bedacb7ff6b452d84e65cd3170afc692af0f63a7369f0ebfadcf7ffa5ca7cd","b22419c2dbf9b2c632f0c7cfa90012e7bf11684b357e3d391274855796fb2e0a","e1c62c2e93c7f516ff9ba62ea7250fc01ce0fa02c9f366638b22a8139806c1bd","9bdaf64c821e1c830595f72b9442d31ed8247ac047936099675cd0d38cec0541","f3e2e6423c297070bec6ba6620e4274c630872b565a46c244645cbe4424a34e7","3edab5562083c3cd9aae8564f7a1dfb85f75f5452bfa6fb372dde19d33a0e1d8","f593a66efe0350d81e794b43c17eb447282c3b809d1de3719c9a68e3f26a9bd9","6c0aaed5e79061d397304ea25612fe2eece0d52aa321f19af2d23e846682458d","f75a88b2a62ebd5b73df1c71402ad7b8bc380b5df523df930ffc21838b31cb00","b39bfa02188a075f3ffabe31b61efbaa34ef7a32306f491e668efcd33d84ef4b"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…
Expected log hash
3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791338675665","kind":"published-quote","locale":"pt","page":"brand:aiqfome","quote":"muita demorar nas entregas","rating":1,"review_date":"2026-10-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.vanuatu.aiqfome","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.