Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“N’envoie pas systématiquement les notifications de facture”
Apple App Store · 1/5 · 2026-08-18

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2647580424

Proof data

Record hash (SHA-256): 2b82bc8d5f0d82a46a997aa9c1cc2cf36bfbb8c5171736074e7ad4c6236a8480
Signature (Ed25519, base64): CiYIwDMQDVajI+4fo5PFPFE/bVlTTuQ/4qt5FqPr0C/wq2RgRmVE4T0/vbM2piPYwEmJZ/i5sWUb4z8amh9WBA==
Merkle root: 11cd275e1b8f31daf4151030cd5fc67eec90cc1b73d6c3abd8966dac0ea44663
Merkle path: ["2b82795c5a9040b1df57ac337708b9c854c8c60759e490ef08f5bc46e9af130b","df5563d567e2171d4e9c3f300433007407cdffda8d60b74d0b067091962fcc38","c812724d02cc99477df471d42996c74596cccc86fea466874b0c7d8c68e12a04","1ab74635cd3a1025cc478109d9d387613e6e000eaedcad4de4f549ec3badac37","7b65a4adf448951f98831ed6d9fb4e6d247107647d650b9a58e9fe1d1e80b042","112ef0db861ff33ecce5d4ce553838acc36a56b1f505cb73153d64166973e063","8510050c04ee33b4fe541e237c8c1db6670521b50e4ba513b83c8124cba7a348","638c32d8c4be12495564e8c65a07ff46f42a98a34f7c3707d4ec410f0c6d67c4","eee254d32570d19f67f6c761da9bd05596a45f7a1e86b0e6c589ec600c290183","c3a8f22c20c576818f995d1663d739ad816e9db8df9fc842cb6497edc6b44e4e","c25928358eef67dcbcd6a99c760ce09c7c01240c060ac48508c6b08dd2161192","678de48f8cf855a7b730e5a0c6fb2a43d5dfc46a56516d4a34ac70933ed6ce33","3012f7a2838d04f2071073f8ac34932376b18c2cc8805b9bec98ec1dc2d08a95","b9f2345d92694d25bd0490f4a3b26a3b973fef20d27569c442482b8bf63cf733","29dd516ceb1cd9fcda9711678cb72a0ee0864d72432066fb0af064f01b46c0cc"]
Anchored: 2026-08-30
Public log entry: search.sigstore.dev, log index 2647580424 · entry 108e9186e8c5677a331a…
Expected log hash: 29924cde6f1b08ef8102d24e7b21fea7f81e6b89af990cb81e380cc325864e7d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788064620038","kind":"published-quote","locale":"fr","page":"brand:sunrise","quote":"N’envoie pas systématiquement les notifications de facture","rating":1,"review_date":"2026-08-18","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id466738063?see-all=reviews","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (11cd275e1b8f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.