Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Qu'avez-vous fait à l'application ?”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3198225546

Proof data

Record hash (SHA-256)

02f492438c7d1d57d2e4f0bfe5ded3c554561f48d6b0a6dd35197cc7230752e1

Signature (Ed25519, base64)

2j/budUXOKiO+bpJU5Qh+4159vUd9QwuotbzMYC5/ey78DdaBfESIfaLBR2R9YmsctpyEDx1aJyM2oRT/oCWDw==

Merkle root

12764493a64961d0e0d426bbec64b837c2e35bc22a58920afcc56db07df6e8c9

Merkle path

["02f5bf1836c1e5dafb2d30a517bdde2d187f836918d7c70bfacc1b6d521148d7","9ee25e9a83b5e97cd4e5e290d46556076bdfcca8b0e3ba63e59e717d0e112f05","d0c72b3b5b98ad4c104062adff12301702c4b3ff3996a16946f1d16eb15bdd71","adaac6236e361b6b363dd7aad9a20bfc5d606e6325b7b84181dadbe871977905","b2fc31fb101b1f556f5905959afc62b7a81695d17242cac6ccfb906a5e0e422a","9647e60e872916ab5667631cc0baa35b86bbf77d711370d81aa60ad8b7bb8111","867295ea85fd6bdddb31cb21e78cf9ff96d3d2461775074512079363bc725325","ba45ea7c17cccca9aae26f0bda6808c9ba139980cf1faa746496bdb3bc04c339","7fb23096058870924827815c99d0f70e3eccb7931d3b617ed49e11fc3c12d6ca","c76f6c2471e4c84516550ae2cdfbdf25ca8f3f12615ba6a615ddaa670e2054b6","7272cacf42a6c107c9b27dd39dcb374981b160e8fad57f25b3db8cd10562ef79","5629ee10ba4b7cb4395bd3f7417bfe15e0278eca0a90e9ab5a5626f1b4cbbdcc","b6c6b7aa75be4fd4f206793d7c98702963f427cfe45d9c46972416cafee9a131","bf01790763bd70681430a2841b8504c59b88918b5b88c9d70f6ee7041d7ca6c8"]

Anchored

2026-10-11

Public log entry

search.sigstore.dev, log index 3198225546 · entry 108e9186e8c5677a10cb…

Expected log hash

a11b46fc63b94f32c49058752856fbdc4e92f7a41d4e67238e3563657fcd50e4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791685609571","kind":"published-quote","locale":"fr","page":"brand:sevdesk","quote":"Qu'avez-vous fait à l'application ?","rating":1,"review_date":"2025-06-25","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (12764493a649…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.