Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“je l'ai installé et désinstallé sans jamais l'utiliser”
Google Play · 1/5 · 2026-03-23

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2594765087

Proof data

Record hash (SHA-256): 1c42e8e2021712a8dc9402050cc2fd12939b28c0fd784baf0803fb50931a897a
Signature (Ed25519, base64): EUZ/C58RQtZsPXJRvOtnnO+RRAtjUQ014n/KopMgjDSHSvleqbLT22PcilUWSDc5HM+89XDWdjBGU2p1rB5dBA==
Merkle root: b839fc90680d59ef42f94824bc47a43844eda063a2dc78e98d04cc6ddfcb474c
Merkle path: ["1c40c0330c51fc1486b2c602bda41b58036e8095ed38f62e582670d92557e941","2cae3451d3ec5bae369197f044e079cb617d88e14a7886b1e48b081d21b7b51a","e51512d484b0c0531eda12b86ad6e708491f843cbd1a9738e7a53bf408ef3b29","774c642ffd97520ad554783f7094eee4686ab0b1f7c37aba5ca5e9037414492e","0a8f0ae5c7f04cf919fb15c7595da68c7ccfad8bb2a3185f41cc776f49ff1bfb","e6134bcea7c108a61d79cba077bbedda85a9570c3bf4eef91319d1ff0031b968","198ff1a137ff419027c48c7806e540709eb175143071c35be3c72c8b2359dba1","7ce2fc048776830bc9701777c15d1b0cfc9d9fb8c0b2d3a3dbae3e3b3e71e30c","f8d8bfa81f6392c759438cc5603e7aa7a86f9985f211d4c05ae0ac7ba9ab0243","33d9a9af3234e0f34425e76a0a7f7481e0a509e446a875f6eb1e191aaee28de9","5b94fa8be1b838bc5638ba69be3c4129766aabfa43b7deeb5060ff36d5ff9689","1f04d094f709c49c616a5b89b68d610703a8dbbb36da629e0005263ac7b9cc4f","93cff867a371eca67187fa18f29672e43dc122f1a11ead8ce02d295afdc520fe","2d44a3f2a338515d5139d8c4d918da71ecf66353dbaf922a6fd5c33bea9ae2dd","53cddda7a1b6beb992bf062aa34497189c716ec3be3251f7e5db0dca344b1a73"]
Anchored: 2026-08-26
Public log entry: search.sigstore.dev, log index 2594765087 · entry 108e9186e8c5677ad8ef…
Expected log hash: 2b2c4baead5a20e634c42acc5e7cfc8d7389892f0fc879f3c38d7eee1c04ecac The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787715994367","kind":"published-quote","locale":"fr","page":"theme:acrobat/billing/fr","quote":"je l'ai installé et désinstallé sans jamais l'utiliser","rating":1,"review_date":"2026-03-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b839fc90680d…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.