Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“il y a beaucoup de promesses non tenues”
Google Play · 1/5 · 2026-08-11

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2631896876

Proof data

Record hash (SHA-256): 135554b6d224ec46ad602bf44caf8591398a049ab6d18367f6a00245f4769c9d
Signature (Ed25519, base64): mdD9KmgopEKEzivta1Gil8aZkITlZlCONej2wL9uLggqOpdpb6wGKwBA18fY75UBLWP401l2zmC4JeS5OUpVBQ==
Merkle root: 4553ceda64e0f7e200f881e3be80f06ad7ad366bd41ae2637340e201b97fd992
Merkle path: ["135cd124f40c3e740c125cb2268b4cbe4622a66badf61e5fd10c1c4fbfe707be","e8437aab2600b50d77037bf4fb2d6168590a8b6acb9db7343e0f67645e659cca","bad6499f43877450c56af376581c2198c0c1b0631f8513999b2679bfe312720f","ad1c74ab32b9d27be64fd15a7b11bcef05697719824faffdb6daa5c1be30fb14","488d643a040440f96b4711c1f114e0887bec07db2bc4b470b50f63505861aaeb","cee08a388ef86d7db6670c66ef7de392a414d97c860514a7821dcc24c3d5a111","8f183e523af0ca9a6d1453398ed9715f6aaa8fde8085a10f172ae0d460fb0bf4","238607cf2b4d3bd6fdf64516522e59e29b79a217bfc72c4f108f391a50a2914d","215ed1ecb359bc040ddafe1c08ff5c8d03201eb239512e466fad1d25d8f40685","beea9ec92b0af5ba61f5675df0aaf096a6a81bb6a7bd76f133e514fef961fae6","c179ae14d676ac8a92755430e673d01bf67e1ffdfa0b1527e16febdcb147dbeb","f9c3d44efaa3124514ee4c64b3279841948ff3e6efae5d5c9176edcffb63b0c4","1b9ac25bd72956239649fced74f841271bb5362800775be62c8a4c65a89114b4","198676edee22eb362b9f42be6e45e0c6688564326d7ac8c78c49d4b535692f55","a8f2b1eb226c55ba6a50b4f9e41f7daf82ed22f31e84ebf68e8ca69f1d094df7"]
Anchored: 2026-08-29
Public log entry: search.sigstore.dev, log index 2631896876 · entry 108e9186e8c5677a5ea0…
Expected log hash: 82d6416ccfaae92d072047c1941611dbdc6106e011bca285ba92fc51ad50f4c5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787970342088","kind":"published-quote","locale":"fr","page":"theme:canva/price/fr","quote":"il y a beaucoup de promesses non tenues","rating":1,"review_date":"2026-08-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4553ceda64e0…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.