Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App horrible, je reçois plein de notifications en chinois sur mon téléphone,”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2593849093

Proof data

Record hash (SHA-256)

20b0fe62a3f56ee821493752f8f003a6398ce8a1ae65b0ae51fd9eb075165a54

Signature (Ed25519, base64)

nRggb2lQxPthXKB+AAgChlKnpSAcfK474E/r2/N/rBXNpxBu2p5CbKemzs801DCB4EgJXN9/fQU/fxeyQwUpBA==

Merkle root

bf7efa712c1427e2b4bc90d88b1aa23ee4f63ba710bf4c7d961879fe6fac953e

Merkle path

["20b56b00c0e277b20aa529576315561c54992d5d7c292a6069d996ca799816f1","eab28b05a2cd13e9b5836b19a487871c9bee317b997311961cb65a9f79f6faa0","4cb64591ad002a8a0e0e85ff591b90d2ff148f114bac0454654ca4757e258c2a","376bd521c6c6ea3d9af0a3b5b262415a56bd91a38a5d9d6c396fcb30e41cdbe2","b4a1d557107aef829e2ac07654fd1a123c98a5aef41db36f27638716c66ec2f6","e835b3476e588d11133e6c4a83be7e4c3892da969e7c22c9108e1443cf57aca7","1b360867c4b674328d09a96c4d6f505d6d7106ac1404561e833f9ad68b1ab713","7e7feff0013e635703a3fc1082d3fc8f28df9941dd983f52dfc20d0ed764ba3c","793b4a7f3f4d49c1652004219c9529fb0b3158f6f2b545e127cd7019f100ddfc","bd31fcbe7f8431cd96b030372ad3108c41c829d80e674f61a224ae1d794c276c","32c67d517c71f14289781d419627d639eb8ef5df98860ed6c88531acf8880d25","91e7c49fe5ddd733c7eab74c559da81db867b02464df666afcef958a57a722e7","df0534fb5d568eee1369ec62e4b92f4d89d3742155a1fcc563d2d1a48c8d1c6f","27805fd0a20edf0864d5d28576ca95bbd447895cf492ef6061e6301aa10d3e00","9d3187260cfdea633ddbcc66a9634ea1f5b599b15b805370132549b0c4947157"]

Anchored

2026-08-26

Public log entry

search.sigstore.dev, log index 2593849093 · entry 108e9186e8c5677a590e…

Expected log hash

ebe120228d6bd16635932d53d79ce948387fb73d80335720cba50316c1f9e609 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787711265995","kind":"published-quote","locale":"fr","page":"theme:canva/communication/fr","quote":"App horrible, je reçois plein de notifications en chinois sur mon téléphone,","rating":1,"review_date":"2026-07-28","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id897446215?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bf7efa712c14…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.