Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“À quoi bon avoir une application ?”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
31b84bf2b476131e0840a02684ffc6521acbcd7cf389153f2935d655b37df9dd
Signature (Ed25519, base64)
hPmQy66iaPEcHzo8h2cAHzPeZPFfUBzGreWQBlZE1ydCPdWQo+bF1F/3TPXznSH6NQG3AWA0Td6YM8nCg7uYAg==
Merkle root
11cd275e1b8f31daf4151030cd5fc67eec90cc1b73d6c3abd8966dac0ea44663
Merkle path
["31b8399c1194cd76f683768aa998dc2132876109cd712075d2c2518008fde21b","b7649aad5a94c68d465d47cccf63425b562458556d4b322d3aa6f61705120a43","b2a906dc94d1022c61c630a5c556ed0f8e429ff3b7d7f255bcb20fdcc1d4a238","9d4c2136aff9df87c3ddec5dc203b7b1acf30e650de1415ca1ab8105b0b4ab98","b9c37ed808fcd37fc5526d3b9e88be943c24809c1a2c7c01d6bc4b5c4c77da18","7da2b240636623f631c71a5d10420da73834a0bcc737096292a35dac8bc3938d","31e0e0705df9f386a7013e41932dd4a09871b8393619f66cd07af8852f329bc1","331e5eb057ab20b58f3279ae23642e781d4c65172c3a1c11a6b8c80b164ee95a","a7c63cc061936c24000f0c2e82793a0688e27fad2b432d40fac7baf837d2f988","e3cc070153e0c97f9dd2e21952a9c5058b483773caa31b97cd774bf9b4f0e2ca","222661198a03a9f8a2f0f79376b2d473bbeb418e9794761fd22854591fb0c4d4","75928a0d6b0dfad126e27d609145bbdcab04c1d6b7862a7021647961bf39342f","6437a124c900ae1f4ed6fb8cf4c56eb08a16de2713891dca7d071c2e8bb8cd05","b9f2345d92694d25bd0490f4a3b26a3b973fef20d27569c442482b8bf63cf733","29dd516ceb1cd9fcda9711678cb72a0ee0864d72432066fb0af064f01b46c0cc"]
Anchored
2026-08-30
Public log entry
search.sigstore.dev, log index 2647580424 · entry 108e9186e8c5677a331a…
Expected log hash
29924cde6f1b08ef8102d24e7b21fea7f81e6b89af990cb81e380cc325864e7d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788064620038","kind":"published-quote","locale":"fr","page":"brand:pandadoc","quote":"À quoi bon avoir une application ?","rating":2,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1210645479?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (11cd275e1b8f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.