Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“It starts badly. I hope it's just an error that will be fixed MERCI.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2657817117

Proof data

Record hash (SHA-256)

1806d5431f36186df9cb9b62fc6bc77bfe924fce199420849181b4381f5d1fdd

Signature (Ed25519, base64)

aOgogFhO/74k7m8bPaIZLZ0K2IhoiqU7Vt8+W7T5wCscyEUakdaEHhHyQCk0jZd3bMmBOBDfMNzBcSqoExg9Ag==

Merkle root

7c31845ea005068c52611e47ff2778bff3790bf9c71538767447b45fe79322da

Merkle path

["1805f64de7c2a79aec2d1bbf7ac957464d80f49537f107382281c303de124079","aff5114f5dd866822b51b9d1524635b2c2ccf7493fc57e11247c740ad83bf497","fedf262f191b6e5ad5a89c2f24d1e98abf0ef0746ed33ba243e6e18265f1b261","bf56effe05423f45b6a18e62ec73d1f9cf1458e53606c310f77a567ddd3e0c18","ce7a4dd84aecb0fa9900ef87cdedcc2d8f00e1134634b8878f832416e8f21040","c3f45b9d15dfb2ba23a491fd5bd3f340747d69d7f2dd52c6edf97a5afd2ffc4a","412ad51b0504cf91b886e9e7471daf4f9706f1e28dff29d4a337e7764f1ecc31","6c7e1095b198a189fe05eb41a11c5e08c0c30a72064a1cc0b1689b0fd388187d","8d3f9c84b86265ca363eecf2aa04e3b0224c4d3f5b810786403add1ca88dbd88","acd15586bf65111e7b937578d554946627e7ca1ae0f1a9d415a97f4405753a3a","ff73a32cf1c63ed7b8d629f9186a54fc424fec374c986661aaaf93f9c008ce21","638267bede645afd0998f3951dd88e38bf105f549cb29248913297c7d2a48a59","de406c010b9d09d7f74176c9d423f8d72b745ac400e2c0cfcdb434d0af8fcade","e49018058753e3439518d8ba4c827c0b343729e39fb424281e6808f61fcc629a","4f862010adf0fcb97b6b2b8112f782a485805bae9f9783a7b39739616b9b62e0"]

Anchored

2026-08-31

Public log entry

search.sigstore.dev, log index 2657817117 · entry 108e9186e8c5677ad3ca…

Expected log hash

0666b5f97f085fdfc4cedfba58ac7e76857cdc9faa5a1032ef597cdb93024c5a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788148095319","kind":"published-quote","locale":"en","page":"theme:pixum/billing/en","quote":"It starts badly. I hope it's just an error that will be fixed MERCI.","rating":3,"review_date":"2025-05-05","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (7c31845ea005…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.