Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Je peux enfin transférer des fichiers volumineux à mes amis, merci à cette application.”
Google Play · 4/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2683384390

Proof data

Record hash (SHA-256): 063e39659b624d9c824313abc50346b139a14e361bb2a48978e284010bfd902a
Signature (Ed25519, base64): fX/d04mNQY+Mg4eEiX3hFUMq6D0IFQoheX4Cqy82KXR+7U4fwbX6URKBLlqjZ31dmdTra5QlQVd5i0bsU/tTCg==
Merkle root: d4c4aaf139801abe64089c6a646a11881b578559d9cb7d88d2fc9332bf4b830b
Merkle path: ["063e2e4d42d9d901c5f01e431f16f27c5e21cdf17dcb659340da4bbfadfc3293","3a2c046d285d6b7b1a42c95b049ee5ade34c5c6026199206f4c50462f13499f8","cfca170d9d1862f5e55202c66055f53046572487dd523de3fa0812dd73315f88","7ed34cefcaa8bbd0af7f7df0270d5b1c1d1f4ec653bbc212d6d729b08df91613","25a70186199239457456fb7c333c7327adad94c1e71834f19bb08292d16840d6","c773eee46acb341ef5bbba98d54edbaeef71fb91a76805c5e5f4acdc3b0be261","00c581b4aaed9af6cfbe4ac5526891b90817d73223ababb51d7550aa879f2ae2","c162d99ee8ee32622c4e8e19d487b7a9b570ab813e3561cdbef2f9af138cf4e9","257062b27c4a7a9bbe7a07af35cb66e9e2c4075a15429acc350ba37e900f61ec","c78fd390619c0b7a670877f0f9612be13f0db8d7da9577e007d8458e949244d9","24815d86cc2d645916ee8ca501f244e818ad27aac891fe5274bea99eda93e16d","34219eeded0fbdad71a4c54612fcdf090ca93e67f7f8e7798421a503a9d4cdfb","6100b8f7cb9a0ad1a2de57d39552d426d438448f64577a5ca4cb2472f553358d","ef527f45d797e2d831211fa20aa17755e8de8cd626bcb27abeeea7640d159dbe","9b3fe954f7b51d7ce6fa763f00e1815ec4c70f892ca128b9deb83a2e107b9fb2"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2683384390 · entry 108e9186e8c5677ab9ad…
Expected log hash: 911a6ed7ed419f928c9567229b2f9168f943e91a3951514581f7a3ba93db232b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788324112523","kind":"published-quote","locale":"fr","page":"theme:infomaniak/quality/fr","quote":"Je peux enfin transférer des fichiers volumineux à mes amis, merci à cette application.","rating":4,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d4c4aaf13980…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.