Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“só pararam de responder”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3138947147

Proof data

Record hash (SHA-256)

d431f50333ee359a9bcb9e7cf0248927d9a66453f5933d51c02eb21bbe4c52b0

Signature (Ed25519, base64)

kubzCZQUpDNoVwVaIHaW8P0L08x8UeLcjTzTMWcy6WsVQBEGZZ2BwZKPFz7/rTRPjgUKQ8R5saC8aiEjupHUBQ==

Merkle root

1b26d1b85473caad1868633ec4c931eb970e81199eea87926818f3f1753af37b

Merkle path

["d43985b5323a55aef6c72025fd5fa05b8b33496dfb742b7304240814e724ba88","9e88d59b18506bfae625ade741e7b5c5556ad94676289b98aec27e5123ffa9e6","6e5b53fd9f620377f7deedaa970a016a889e7ec11929ac9b888ab94206b59621","c7ff0f1300c70ac67f5589497f6acc87686e4363464c808450dcab14626b9f26","1b97aaf63dbae5abc12647666ca5d53e84ba7882a44409c12d4e5d6e99fae1d9","f2ffa38ab108807a41e928f8ed14f89d8828fbb96d9eada9e39b97e9abe1eccb","96bf9c7842ec428a49edf62aa615e40f34e49b580a8e22525aec08e63234166d","78e87cadc134e84931fdba1d8e62cf26e5bb046e9b0f95e79308ce4a90fca038","061e05b0ea292ba818ad0416a0b9ce0d81f05310cd4d83bc2bc0c69a3bf778b7","da04a8dbed4d2337377a0b31ac4b7db181eb5e479bdd7bf306e8472491e29613","473bd0e4b9cd2abfc3c5be9df38413ab7910b5346eb6b8ce3afc90d987956108","7a24fd993e3bf84eda272d8736103975938ecdea0a4735f7dd20272e5426c081","a6a0da628b07765cd60760418523562175762beaea14b25d9c7e86ae845ff868","960bf22ef55c7546ef19790851db978b808b1671c1796ebb940f67a9b4011141"]

Anchored

2026-10-08

Public log entry

search.sigstore.dev, log index 3138947147 · entry 108e9186e8c5677a2712…

Expected log hash

8f66b765b7efcb11dcdcf57b81c46ed3317a5895f5b870638e23b76f1efbb2d5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791425549743","kind":"published-quote","locale":"pt","page":"brand:delivery-much","quote":"só pararam de responder","rating":1,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=br.com.deliverymuch.gastro","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b26d1b85473…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.