Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I didn't receive my paid order”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
d5b39d03893849b0eb4c1d3f315979c4622927fac68d33f98dd656fd004f9937
Signature (Ed25519, base64)
JP8FoeKJjd22FpNj9yrjYp6VNj9R1HiK6NkYwvXz0VrxO9nP6rgPXMcFccNormsNSRGooRSNaQwYdlWh903kCA==
Merkle root
d312d00ed6ab2beb6e18f20d8087ad3474eb8b04b26d5ad949e9237bf3ca4c52
Merkle path
["d5b3e584705799e6036e2e6033e7d1adb7ff25828eb5d34ad65d8c25d6fce36f","a81e4c06dc0ac929e446b7cd7f4f70c4cd736afb5188daf20b3ce8f6ddc0069d","cddc965054a31f7fff09cc636ccafb090753f3ba110c23030b12b56208116387","0ef040517a776b9b26a027f3b9c91b63242bed9a0cac7cf332130f3743f11b8c","5d4778b1831af9e059f71db4557619ee0ea5700f2103db1e658928d8248d1da8","1676af7f24f2974e284523e29d89f8ceb628d8a200f1a0f24e902371d287aeb8","79637a1315d1f28396f28461a86e79da7971c40416522979081d8b433a49a19e","12d8ccf87a27e770b2c39e9bca9604e169609c1ec17d834d65f1703331d91e5d","3f7a016e222f7da9a21fa4ffcc20d44b4c73dccdf2f663f907dbee6384f9f0fd","4ef0e0c3c03b3a82295989be145a559bb32aed5c427e4e5c12958f8e5a9ec75b","29dcd5257992adc48d7cc9010d17582b98ea3e9e69632728415a894722f2d6c0","172ba4a24dc315117df8a7bbf8c6e369c249ac83287dde04cfe23a90866513c5","8c89f81f61eaf978854d270b4ff0a1317ff7ae0ffece5e83243c12a00b1880f2","d4ea6edbf936260828ac13c8a7e9c80d8993bba0d797e81dfdabb054446e5c22","799c0ef4fcc26840c2a1a2c1ea34f7ce94ca70a3893bbb37f42757477cf242fc"]
Anchored
2026-09-29
Public log entry
search.sigstore.dev, log index 2991846025 · entry 108e9186e8c5677a5f08…
Expected log hash
321e41cd200068478c5cf6f353f00dbd75153d3d8a640e241b1a6e8e4f8ac2ea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1790574513694","kind":"published-quote","locale":"en","page":"theme:delivery-much/delivery/en","quote":"I didn't receive my paid order","rating":5,"review_date":"2026-09-22","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/delivery-much/nao-recebi-meu-pedido-pago-e-a-loja-e-o-deliverymuch-nao-resolvem_8lltu_C3U2HKuvqh/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d312d00ed6ab…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.