Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“J’aurais aimé un peu plus de choix de cliparts”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
1846d2105a2310bf7ffbd9b106ee4b31e8477b439871bb859b33338b6751bb3b
Signature (Ed25519, base64)
nq9oXRGF/TjgfgGkOWVOjMHBxw9LCklWjBHAmuarRtSg99V2xDC+TcvSmdvy5ooPDaFQ1SgUmmnkNaXN1R9RAg==
Merkle root
f1675b25d5466797aa702b991c0807556a3aa1a9c10b1d677032c5c3e40f1b0d
Merkle path
["1849886e88006cb1079b620674f8fe29078c4ee0947125d4b567c21eb393b13d","7fde4ed34e9d2cd12cad45671569b79c920b94ac6631390e378d4ff75f569f6e","759a72024e3cba820f24f4dcc2617197e7554772c381f65c7edf785aadf16534","0e2412e40f77b1b70ec8ee5e013d154b5133183c84df72319412394a0c6aef98","f50fd9f757b7be897b5acb178624476b8f2f7d4f4edab2363172516b1376832c","f1f90398f670c630396f15371ab9c74f5995425389be0850060a70763d8dc07f","538200decc6dc69660a7fca653bbb81a7398b06192114ed8541081e5627ee86e","63798cc944b4bdb48d4713c72e7015b6d1d36d15a15328c5ed33fc8391b61c16","d5931cae7d0b8fa2605e0e884373a5aee438425a04f63006a75adf2bad6240ef","5048f468fb5b39e566da601e826e303aca00f67732456e8267516df034651a8b","e94705d0a5c3ce6cdf14ea1d3d5827ec4a5b19fff1e7758089ecfa18c979e805","3ffeefdbb85ccfdad5dfc0be577d644da8a97ffff64074f8a9bd984a32cf4900","eb2c0760e56a26a302dac6e5e45cd28c832dfdb704d2fad1f950ca9b04c06ac1","ffe25fa82d2e39f699290daa5fd756c6fc66643a11e22672ded33d0c3f3dc940","5fe831a43839c48bcf12b225ea332c8993d31242d7ee3e005d566c8030d9fb31"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647241519 · entry 108e9186e8c5677acc32…
Expected log hash
b1a9a39ed2ef6e13fd8c734573349e96c5febf297457b76656f9e7c62e15698b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788056210386","kind":"published-quote","locale":"fr","page":"theme:pixum/packaging/fr","quote":"J’aurais aimé un peu plus de choix de cliparts","rating":5,"review_date":"2025-12-11","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f1675b25d546…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.