Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Toujours rien 🤷🏻”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
234e2b843002d9eb9aa1539b7b1d41751ced70c6b97decb0b346f69c9a60742e
Signature (Ed25519, base64)
XOCckVtQ4wZ2NKkOF9Cfzduv9wyRqE12BX3y03r5EgWgGgTNY+m+8Owhou4prMfWdiZLXqCzdImD+Zx8C4A6Cg==
Merkle root
12764493a64961d0e0d426bbec64b837c2e35bc22a58920afcc56db07df6e8c9
Merkle path
["234ea9d15038e7466a59aa2ad34866fdde4f52b73808edb440f7863e1ddbf0b0","04cfdc02b4cd44ba52be645cf1a6e4e2fe4915bca9a4392b30c3b936a1f82819","fa4edef727a765a5f9c47cf3aa987634ca585dada47534d0f7f1bb35ca1a957a","73610845dcbd3054441cbe2ee7df18b374ccfc5f055ab0e41abbf955f960df98","3540cf668b7a436d1685d219735e8cf26265fb2447907c50d9d0c12e1e3bbc34","c6e99e69593ae45fea29594ddd2e7359805028d55776ba12f882eae8c20b00fe","3e3d8f2654774e39a90c80d8e25a0d83e90a46268e4ac6e496965d4f991ad85d","191d5c4f6aefdc13a7ce4757e0cc32475130bd11823ab56c44594a8d50396952","5a32293429d99eb4e854cfa3c25b8c9d8a2a99ac2ed7705583da547b9dbf47ab","7f3a3ec57a790cd251c2c1541de865bb8b81facceaeb8bbc6dc9226325304147","f21ff959a638ed664bfef10f083a14e62333d41f01bc38bad0e058c79273a381","b52a8a3015ae5229f5a7205f9433251f53bb2b22b2f3bb0bfbb3deb2076f2c89","b6c6b7aa75be4fd4f206793d7c98702963f427cfe45d9c46972416cafee9a131","bf01790763bd70681430a2841b8504c59b88918b5b88c9d70f6ee7041d7ca6c8"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3198225546 · entry 108e9186e8c5677a10cb…
Expected log hash
a11b46fc63b94f32c49058752856fbdc4e92f7a41d4e67238e3563657fcd50e4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791685609571","kind":"published-quote","locale":"fr","page":"brand:twint","quote":"Toujours rien 🤷🏻","rating":3,"review_date":"2026-10-03","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1225135057?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (12764493a649…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.