Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Simple et digne de confiance !”
Google Play · 5/5 · 2026-07-24

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2685255068

Proof data

Record hash (SHA-256): 0bb34e0fca5705ed862e4b021539bd97642f587f7f31c1fe4abd199a7501c263
Signature (Ed25519, base64): mDE0x/2vTJWWvdsxvPOIpXyv2NBYYJhFIn8Hr0RP848ykZe2NKFZCgsJyfu6eR16j3ZDisuNaldSX/RVxJGbCg==
Merkle root: baa63339ed127dee6c2b1504d3718b71e94c83f7a90a1da737d699c1b2205913
Merkle path: ["0bb2c569b373338fed6f6d1e6cd5ff7c1aa210493214297778a8d334859146da","73b7118d1d954df70c4e1a2925c8116f8f9aed966b750b3f11a2507e5a3fef57","8a4a000d7d0034d8f30d024d25fb882e94f2326be9e0340dff0c1c1d881c8609","cec2e1e3de342292b132b8ee70e531195c7ddb48f61840acaccdf954133d32c8","214e72e378c858b738ec24daec8a941f35d5d417c2fed7ba2843b2c4fbd0643e","176cfa3c2f97247dfd375606f6ca483db38970e6959e05a80c931d01bf8f2086","d3eff9bf1ca6d4f2fe7f99256eec834ab74e335e4d3544d9857418720dbb756d","7d4c468be48e7789437428db7a0f15e4694e0054a9e48819b9e3198b52a572b4","61f5f9086a75fdaf33ee678d93f101c6a46fd870722a299996d6251a8af36aa8","860caab5ef65436eaebb4bc7cb042ea3934cac93a46250e2ab62069098ff4630","866ac435089df85284784301c2051c4557a8d06a36a55e145220828746f98798","e2cf7144d23a312580a4836932a4fbe7f0ce303ac74ff7913d4c72f492af6b2d","eee880a255047d554444ad39a6fcc213a7567298f0f3441531c01029e7a71d12","ac24abf3a1c506aec2b5c0611268046e40bd3e23140aabc047f5c16f008d5dd6","11e6176a525c956e4f3a814b04624b93eb8f47dd129fbee2765869efbc5d4d54"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2685255068 · entry 108e9186e8c5677a482a…
Expected log hash: 03e66e446ea90df8a21d7d402854ad37d81ce71c2336e953836f61c9bb1e4bf5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788348937690","kind":"published-quote","locale":"fr","page":"brand:relai","quote":"Simple et digne de confiance !","rating":5,"review_date":"2026-07-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (baa63339ed12…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.