Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“On peut juste se connecter, c'est tout.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 3161668256

Proof data

Record hash (SHA-256)

0bcaa6bd57d4fa4e9893e4a0f75188bab74c944d669a5f0e2f8a44d5fabb9dbd

Signature (Ed25519, base64)

8Ss5M4PXQnluobX+bje+L2R5mJHvzHIdxvfVvifY8LTm3z56c8P7Fc9o8ZRak5Ftq/MZ6hz8bV87+dExabGwAg==

Merkle root

dae11b7f399fa27d7e91aa4463415971ac3f4413815a3c608e4b798805e78c60

Merkle path

["0bcbeb6e7ad0feccf7425a2d27373ca791fe8e0f71af1fdbec76f7b87bb0604d","fb9e9fba8fe42ef3d85264fb8887e1b66ab3a83f380106b161fb71547ef3cc00","4728df8478516e222e547606a40137dc53d87c27cf13d50197c061f2c41b9a5c","3094cd08d3d27b38dffe4b251492d05fe503229b70e54e95dcff6f8777cddd98","3881f730180b98c698641a2c62c7c793fcdc6a7356661a5f7313bcdcd7fec65a","56eeadfac2436eab803d6feaaf27f653dbf80ef05511e9b46302a1e6d562b3be","b2860901fe8db35b66dfa4dcb07684ad382b68ea14e935c1176474a505d3bb06","9195de348b6d593fcdfefced420e09fa1d3bfa5c6bf95e4199887251d720c040","c33a64bd01c30658644159c912c1bae7df9c668cbb491f86fc1a7e7f683711ea","137fbcb016c5365a2e2227ac1b0b330e4ecdd1405abfc3870c60b47a3634d48a","50d046ae1ed8212b4ea40ba28cf9150f42577a33b8131d68e7ca47560a2ce5a1","0716d20b2d336af648f125e1c2c654fd2223c3dde403611772680fb1b6a17314","14af96598cf9d6cb016b0fed730fb6c3e41450ab1c3ebbb7f845ad928e8a42fb","29fee1ee29171f2526142193c918f4d151680a806133c34179179c2fe722d806","6771b856bc54b9b41031b35ff7640ad54c5be8f800e1967d73d242437a9508b8"]

Anchored

2026-10-09

Public log entry

search.sigstore.dev, log index 3161668256 · entry 108e9186e8c5677a744e…

Expected log hash

dbaeb9745833827bd692133822ce98bad4dbbf6d52d00fcfdadfb4c533d214a6 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1791537031439","kind":"published-quote","locale":"fr","page":"brand:sevdesk","quote":"On peut juste se connecter, c'est tout.","rating":1,"review_date":"2026-05-08","source":"Apple App Store","source_url":"https://apps.apple.com/de/app/id731738076?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (dae11b7f399f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.