Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I placed my order and didn't receive it”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
8931ac6f88d68da3bb75b4d9f541919f78586bff922a634bfc1348b0bff2dac1
Signature (Ed25519, base64)
QMsIxape0zrBd00qUiYS6bekoJa6+qcjvgJxLMn3fKP12mayCTHIq1WeBJGwgZf0+xVWBXRKXxXnlnaXAlHUCg==
Merkle root
3b820b0e91b2475ca02a79fe65f1dcaac35af570ee21f4c868099b9c17e17c1f
Merkle path
["89375f80d67396e67aa4acacf390aebb3246acbdc64125038e5b2913ca282273","9216500eb13ca27e9fd46b3d834cc64b1e653b0cd45a1bfcd6bf416e9966a95c","d50cce1fc7110b7026619b0e8747343b0c3742316fc72e9aec862eccf8e76f35","30fa2e859b528b11e88fba940cf0c48bc2669d6c3ac8bf5e8561eb0e63d25fd7","b53d486eed8f102206dec0199e8fd27ac9958b2c37a171711ff4a5bd464e12eb","8c05200a63b0ef5c53f9f352a061b0f8e15fc0a27a1993a723bb75ae07c3eff7","27084211a78d3c7edb89be47467ff32a36b2225985ce5aef071821a5b97a8b59","4c9e52ce1b4c691490b5bf93dff5b1f874cc73dd9ad04bbe80298ec8e30f4070","b72f67605778eb8f32f5fb01a70e202e8ba889215d6ef4e55a5d1c51cbc9ef92","d2b3044cc70e42970a1286d5edec34d156a601232207a8cef463fe731643974e","2dd7c932a16b693260526fc2447dc6f412cf40aa69ac5e1deb0223c56600f9f7","2d343add7d6c445de4039fab2805e7b3615704f7c464b69b8c43459c7d961350","92dc205e4aa0fc1885d50120ca1ca6d484aa433fa7e4e33e903a12548dc38060","faf75fd6bb73a751917db6b8d00819eae7e29d2bb6f9270942a28e0da8dab05b","92de2c105ee268f1f08dcd9d0a8fc946130cef7b39b15a2b5ed0d7209687c9ac"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3124210377 · entry 108e9186e8c5677a0172…
Expected log hash
20a5241ced0c7b94303a7b8002f1aae217df3f1371aea54ff5745a148bddda47 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791349684588","kind":"published-quote","locale":"en","page":"brand:aiqfome","quote":"I placed my order and didn't receive it","rating":1,"review_date":"2026-01-12","source":"Apple App Store","source_url":"https://apps.apple.com/br/app/id891143703?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (3b820b0e91b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.