Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“très bon service”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2670833107

Proof data

Record hash (SHA-256)

24cbcf4e9115f8f07457c9ad9ac6d606a86e359efed2300bec2da12680ce625c

Signature (Ed25519, base64)

s8eKZ0C2+QPwFJTf8/y1s/TnPG2OYsFDKzv7gwGpKVZf40475VuGaWEKDHS59YPJ0WT+wJorosyp7wofnQKaBA==

Merkle root

37bab7ab6bae92a907497e5a4ac9fef6a8cc674cc365cd962e5b33be029217d4

Merkle path

["24c7f8e5ddd1e6f9a00f7fc36a9040d4fc5051a1fac0b9e36fcd77d5a5c2b2dc","82f93b37c304e7baa4d091c46036a07cb46baa56167e47526e3c7044d0774992","91e2a7f85b24572f9055b2f1e25a8f8ec6e4f49b0d05667cf1b00db8eb57429e","f822c2bd038097d6c8b217f10f28d4aa01890365218d3042bab0df16d98080fb","a0f9c41b9f9e3fcf9641b353b0c5c207a769e62bb56ff2ca04b8dee5b7b8a179","691c38dd8a0f96738ea7b1ec4c8178bdf2dd6f1e08c06087669b2d683f85865a","079d182156024da7b5eb42f3f2a8eb5b532fdc2359ac03576062af62d0d3e747","6b9911ffc29d0057903ca7da3181f86a48a8230fb2d50f8909940199a2941ebe","1183bf6ca181c9f95917f7e87ab8350f9eeae322a0f045bc8980b8d6888f94d4","1e405c3767843b2b21fb08fd8d3a09ed5d5d8ee00db3ea2d01f81c9c2a7be9ac","3af4257b417edf4ae9017f8537a35c342096883bee7476406837fd8b2bfa7b70","f8c87cefed54583dd6efd0a241c9f160ae382442854924df276fb7e0358b4e41","ec831a88cfac83431928609cb4878ed5619e6065160f677d7645e0479a63a3aa","1c8a8edcf77caa5fc3af0401d1e3fed2c8693428493c7127f3e51eef4f9cecba","61a69baf0202b9bc9628f4c2534169a082ad6e9020746ee3a84c82ac414b68ee"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2670833107 · entry 108e9186e8c5677a11f0…

Expected log hash

93b6693570baaa3e2327aa4b03aa01159ba10923124d4cddbdc139f813f3f422 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788230822517","kind":"published-quote","locale":"fr","page":"theme:canva/service/fr","quote":"très bon service","rating":5,"review_date":"2026-07-11","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (37bab7ab6bae…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.