Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“É simples e fácil de utilizar”
Google Play · 5/5 · 2026-08-21

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2991846025

Proof data

Record hash (SHA-256): 86fec0a2c6f933c04f86db821aefe550d729f7cca4b4d54947e77468e4eb1cbc
Signature (Ed25519, base64): DbmcycudETwEgcq67xLbtpT69Ngby/DNo10wxpsJj4u7DVmkColi0PqzzBkBBujlqyuBUBSpHa1sbqWZcCsZBw==
Merkle root: d312d00ed6ab2beb6e18f20d8087ad3474eb8b04b26d5ad949e9237bf3ca4c52
Merkle path: ["86fc821bb4ca00f2866198cbb8861ce3d1952a8c248720d2e97e8be46f7c1fa7","777be1618e3aab42e203bdbfa9a10b84308eaddda5b7137a40e1b17df5d1b793","798318dcdd1a736b4c11531fad724ac73886df2159136c591366d5cfd0d0a789","f24f2b965c2fa83863a31f3d2fff087eb124c003b1985d12cebf8c4cbd13c86f","38437c3f3732a781be0b2c82a14082c2917afbe1d201825ca3bc5cb27b2d06bd","955ccc2ae944aa09a5de8f6f7a22a50227c489275b7ae0afebbc9dc1c9803429","28d2b8cf5d5c2e419789410382e4343b8ae866a586db6311c5651a38b03a78ff","8b99fec61eba74c25ea5906d02bc102afe188bda92aebd80e48b20da5d204331","01535cb9983c4c26d2b4e6d1d97758dcf8129a18967386b34a1cf508f2f5fff6","494136641cdd19193e631cfa86496d5bb77b175f7413edf7eb46791bb57176fa","7a3e7276ec6010c497e45539787b7d1805ae12fe276c580fd0936ec265a44fc9","a28fb3667d0080c2e20816a3860082547d558402a87b0ec8507ad2c8e33f6370","5ee45a9576409ffb8d801d5d47338bed83678e9a8a2fe9972d7225dc319a088a","ac3e8eb9a4dcd818facade9f7856ab850324ee2662bf990758158396deb094a5","799c0ef4fcc26840c2a1a2c1ea34f7ce94ca70a3893bbb37f42757477cf242fc"]
Anchored: 2026-09-29
Public log entry: search.sigstore.dev, log index 2991846025 · entry 108e9186e8c5677a5f08…
Expected log hash: 321e41cd200068478c5cf6f353f00dbd75153d3d8a640e241b1a6e8e4f8ac2ea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1790574513694","kind":"published-quote","locale":"pt","page":"theme:delivery-much/ordering/pt","quote":"É simples e fácil de utilizar","rating":5,"review_date":"2026-08-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d312d00ed6ab…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.