Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“No meu aplicativo não aparece assinatura e mesmo assim já vem cob”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
aa10a133b833e1f04eedd24304c87223c2b010b664760590e13fd3e94fb064ed
Signature (Ed25519, base64)
bDL2bBnRFP5NAuDV2yaaqBrQDN6j4uM0xC+gNV74EmqgV6QgYnL0HUSb8n7YudJf32GtGsMn4hr8naQvuoDsDQ==
Merkle root
92de3fc6370869ec6c1d0482494ff1816d45e719fbf27ec8d8d02933c2b7c658
Merkle path
["aa08f7ff28e9f0dff6ae2db385bd0912dc88dd3cd1898bdc8d5d26881a60b54c","e98202095c3aa165ba82bc7289a25d449985fac96477cfb6fe3d315557a9ca5d","8a0604dd5b2564e6a48b6ec4c70ad3e571172363ce136456e78c55e0324febb1","e5eb12ce0f82411884e9823bf0c7bd8d5c3a33100b098200dfa9fee07b7a6a88","3888842592c5fde8529ed74a4ba1e8994ad911dd376a30088f84c2f726872280","97bb8f3bbdc5db42b79fbd43a0fae246739cd5f6ad44066237d22a4f9fc9984a","bb804f1e2398a7600fa65b1c873de0167bee25fb7a1dfeebaca421a17b753672","6c941ad9fa39fb8ddbf7bb580f1aaa34c23178fd2feb7a47d34210f5bc0b6d0c","d71324693ee2cefd79d633a0f1c8083bd5b2f7ff1e71886e165f06b00b1dcd2a","bde273b7135bfe53716d60c1b7e2772564253a7e9de0038797d452e3973c0309","c44bab9c1715054d73e2ae07d998d194dd3e7b006e1b772eba2956e87de6969c","6ad134ff077707cebebcc904fd4992ccec683fcca97d611ed8671333ac1847af","eaec115b999ce4f56ac9da9af02e783a3380be0a3b796355a5f877302796ed54","a7351db54bb74f5f5ac28186d9fd23b3f96813c66df528665fc553ab2f8966d7","c3a054d0149b6ba893c9f6835a95f324a05e1406f9665c11f96203fe902ebfba"]
Anchored
2026-10-06
Public log entry
search.sigstore.dev, log index 3102753131 · entry 108e9186e8c5677a9761…
Expected log hash
5cca28352ab3a467a358005e8b17999e96a5be0f2e71c2152bf575d4cd8c238a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791264491480","kind":"published-quote","locale":"pt","page":"theme:ifood/ordering/pt","quote":"No meu aplicativo não aparece assinatura e mesmo assim já vem cob","rating":1,"review_date":"2026-09-17","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/ifood/estao-cobrando-iffod-clube-no-meu-cartao-sem-eu-ter-assinatura_PPQG-lLg1JIb1-7U/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (92de3fc63708…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.