Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Cette application est vraiment très bien pour les factures.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2542751096

Proof data

Record hash (SHA-256)

2aaa6aa5d123b013db8ea7106e240afcc49108e7b5c0e6e117517197d231d7b2

Signature (Ed25519, base64)

qTF551lOzqdHiWbFVFfPcKQfWbV7f6390GJ3J8XGAMRtDCfM4QENz35Rc32pzZALG7NgNxQ/kFa0LNXCLbXMDg==

Merkle root

cc9af896bdf0beb88857e1dcc841c404ccd4c59cbcb6932f17077fc8aa87fc23

Merkle path

["2aae959f43ee5c1bddbd6a40ded502cca155a74e632a7cfe17dfef2be4ad461a","4bf410ca8a66bb9430da072ffd47dbe8f0dd74d40e0e6a3938e33ee194094c08","e5ccee38e8bfd1efaf2ffb969ebaabd4b414c9d322ebc571deed734ae8eeb872","93c297c461f1f8112689f1a278c451c619b1bc19c48b753881c9b9a78e19386d","6dc107261135a73299d5da0cc3145859cd35b1238a126c782f1119f39cbf96d6","017f25ff989e0012e9464e389e25021d60e7205827cdd57c9169a6390b615f6d","6ded993f16b613dd5d2bb3c6310103163db0e9fbe118e4fdca73ebc82055fe4a","3a9f4cf4e6eb24895903aee5bee84c80259d5369b50419197543af3c405f9d31","615636c45ebfae9635fcd0bacfe1a243a296c8a13cb7e04bb235a5f0df790587","97d3df827e03f4726bcf09d8e5bf2ec7e20515553aeda15bd6a5007e8f306c05","e37751a4183855c5412c58192d4fed82f642d87cf746c81989d46727a50c7042","dd4a51c39ef5fa93876b3405416366bbf3a7b89c2c89374c78e1ee723166ebfa","4372dc9da9497fee58c424202bb40227ff1140a098c2b49beac2f4c4ae9a0331","0f351cde6b1d9915cc0e417c0e2f1f0e3b04741e1975a4ad546a8eefeb399e09","7e6c62c2991c7cac05134c9f9e2ab89c75f6106f706f524eb2e9fa9f554216f5"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2542751096 · entry 108e9186e8c5677aaab3…

Expected log hash

8251ea19feed4cbe325f48ba93f0e47294878633f5d43178e4a3a023547e795b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787281943761","kind":"published-quote","locale":"fr","page":"theme:sevdesk/quality/fr","quote":"Cette application est vraiment très bien pour les factures.","rating":5,"review_date":"2026-07-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=de.sevdesk.sevdeskgo","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cc9af896bdf0…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.