Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“I didn't receive my paid order”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e9b12cfad9ee6667cb17c780d35ea78049dc8e844a580be8621425db8ccbb358
Signature (Ed25519, base64)
WsI9Km10+4W+OdL/E98lHPywDM8KAdRJTsBqobLsOSurQM4wcKP0iFarAk2lGYpK6y6r/jInrQ2E15naiNC8CQ==
Merkle root
0d7fec37eb7aa7ca022c461398d36283692153bdca7d5292b2302abb6878e5f6
Merkle path
["e9b762cff8dd4ae1f8e1d6226051d524a755843d9056d6ac6cb5f7932e3dcefb","c51e1276548415d7b915217db8fa5c73e56a01939c4b274955f9afbd4f50b5f7","95af6c9cb277195682f8bb104b40a6a784f27fa3358be88d3141f8942b12c6c1","746126bf28e9124f407b06ab4d36208e647ca0fbee46e7f44a4cac20efed0fc1","ddc7fafb486b880b4957269c8f1e63a8f4fd7fd38528274a01841bc487405770","f0d21a6c46f169e0539db4c09719ea4ed04ecd3977d0966af879d52bca441223","a80d292f7d99178653da6f40e804e39f8882de1415d367b747923fe785b78049","9c7b97f4dc4b0c6fc5693bc98c2dcf7a391b5e8edb8c84fcd172936cd9016306","c01752d07e5a22a15ea46d531cba89d2d1d683c39d4c80cdcb7f405bb9c02d52","aa1aa2b41172714a41e208fcd5e9fc8511b9461df385f75ee44210a915e92128","5b76c9b0e22c8059058db9120e9dc09437354691e26154d68c9ad05beb6b57f5","0fa3a575da66b503a77291657846b5daf13a9e496754b0b1e8eea48517292775","956e9e262109df10194605d76388d273cbe98f6754d203b26bfbcbec8d5e6b13","a5e4945621803ecfaa28b41399735783919e0518f2827e7f6aa82a6ed0687d7d"]
Anchored
2026-10-07
Public log entry
search.sigstore.dev, log index 3126883925 · entry 108e9186e8c5677a6678…
Expected log hash
7790667e260445bf729ea3061132c2116b163a0e0b944eca343c9e8408350ef6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791359818972","kind":"published-quote","locale":"en","page":"brand:delivery-much","quote":"I didn't receive my paid order","rating":5,"review_date":"2026-09-22","source":"Reclame Aqui","source_url":"https://www.reclameaqui.com.br/delivery-much/nao-recebi-meu-pedido-pago-e-a-loja-e-o-deliverymuch-nao-resolvem_8lltu_C3U2HKuvqh/","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0d7fec37eb7a…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.