Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“They added a payment method with another card without my authorization.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3121353835

Proof data

Record hash (SHA-256)

9c3653c936fcb5fac996c70513f4fad1b56783b13f492cc99d00f2e59baf70f2

Signature (Ed25519, base64)

+7gGD6TPBF57QmFuhVGWHySIwdYbd8Trj6wwF+ZNKqp26u2AGxWR46WYLxz1n4P1S+Vmkk774+NQOadR8vckCQ==

Merkle root

1128c1e3e4534f30e1f8c2f8fc1f60db99ca4dd81f25405dfff62ff1f39e22a6

Merkle path

["9c33de189827025b6f6a614bf2b4b8d1c91c6b964519286b82a0794b617c76e5","2b7fcc987017aca9c41f059d0e9077697e459e1b016d79635cb2c3e1f7f37666","c925b35fc1bb78b6e3ccf345974b06d979bdbe7bf3d92cbd9164d2cc3fe14855","ed913e84a4a8980d7cc852dea0775a3348fa0aec3d5e20ba33a9cad9491d674d","92c6c70b7a528c7b257e9b5e79c0dca54a3a51592e4e8804ee92d0efe44f68b9","3bd87f8000e2660995c0459d3c398f31457c66ac293a87e956e3276af6999021","4a45cab70bdce5d82ece93e865f94364cf4d83ca7fad7b883c3edee09237cf2f","42718b5127170e20085bece7d115757099333ddfdedfdd0f37c0553c3d7510b3","a023eefa8a0c9b552bd6cf6b65127265b839f85e3d3e9dc2cf5c9c0798d053e5","56456af5e2d6a39a35729e00e3781f1fa4b7023b16f9602cef58d45830ef861a","21a4951dd2770b7f12885dfdfb3cd91ff5b5a0cff6c41a8ffd83eddc53fe6973","66e19ed77d2b4b9f98d28d6a739154f29118081a742b3e11cfd8661f6621fe0a","4df1bb4e92b8e41fef337b07576176208052564f075fb70e20d9fd388eb3a1ad","7e713154c923be82ce1375371bfd0581a450c49f074e148372ef4740f1434073","0f1ba71c060deedc77d8566f04d4f91c80878775c47405bff7bedef8fadff3b3"]

Anchored

2026-10-07

Public log entry

search.sigstore.dev, log index 3121353835 · entry 108e9186e8c5677a938c…

Expected log hash

3980f7151edd7b0249ea159b11c34712cba10d59cd8ffa603af676e538f81cfd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791338675665","kind":"published-quote","locale":"en","page":"theme:ifood/billing/en","quote":"They added a payment method with another card without my authorization.","rating":1,"review_date":"2026-09-17","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/ifood/cancelaram-meu-app-e-mudaram-meu-cartao-sem-autorizacao_cwo4WMYEaFYN92ym/","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1128c1e3e453…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.