Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Appli pas pratique à utiliser sur smartphone”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
231d756057b87df92739efc19e5f076783ebb60f4ad6f460c0480b40df05839b
Signature (Ed25519, base64)
BXFkLxa+lcArd6nQXMhhZKy03l0SjKCbSP1TGATX1Hily+V5P5a5DPjZmahMDgK6etH9AoVb9pg6wHJLbISsDQ==
Merkle root
78886eed79c5c55077432ce3df8d075efabb6513370ceff84d7b706b9eae04c7
Merkle path
["231651fbbcb0778866aba8c413418b3d69abc3cf2fc58b5e171e6b716385bad4","32cbd16f264edbd22636f658737d6a1c38c7ccfbefbfefbcb606eebe662a2d7b","3bd6833e15707a1f32084999758a002ae9db7df7f569e64cc1525a510151b0c3","1b1b5a5a45bf5e9294334b6fa5b2dce3bb0dbd581bf6bb045fcc3897aaf1d705","f73331be8305f5b7c22fdcd949bb4eec4b6c1b9a9f35db3ca3e0ed40f97acb50","0cfa8463360962f6a9721d3146cedad9378fa518919071bb86762bdb35201205","0f984e756cfe2324c85f85680bc823f605e2fb6f10e1d3003b5dc93d6e0016d6","1e69aa9f3721a8a756e312cf9e20519c52490b5580ba1bc20d9b9fed39f62598","1c7e3b16e523e8f74202608afb6f54844e4c8fd35fceac84d84e8eb8060d8708","edb3a2a24e35fb95e0d5bd4d1ea089f9f3cc583a5c20e07ccdaa8144561ac02d","adad62f4418f6a84f7c6f8e3b038e116490c1a0764cfc6aab84f328f4b7baa1a","704e27bc5b5e6ab0b324cb2a10d2c003c722b3de760f10b0c727dcb9e668e67e","9fe048f55ef1db993b15a6e86f672087aa43b92600c87c54204aa5032ace339e","dca3255210bd4138ad43ee9195c33d4e1bfb62117fe1834a1314b7522fa9bfae","4799bf594f7e0d9e563de0da432e35b6bec9a5a67d166463ed76ae787b7b69f7"]
Anchored
2026-08-27
Public log entry
search.sigstore.dev, log index 2611910343 · entry 108e9186e8c5677aed98…
Expected log hash
357f342aabcc9f7336397f12ae873d9647084d84f84802d1a7af0f5727328ea8 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787796746663","kind":"published-quote","locale":"fr","page":"theme:pixum/material/fr","quote":"Appli pas pratique à utiliser sur smartphone","rating":1,"review_date":"2024-10-13","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1319898516?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (78886eed79c5…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.