Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La seule application que j'accepte de payer!”
Google Play · 5/5 · 2026-08-06

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2683258276

Proof data

Record hash (SHA-256): 33a78e4a10e3564b96073688e5f1ce9e236fe350cf2dd23dbde6d4edd13a3879
Signature (Ed25519, base64): nTu5/gqHW3JhPVI1IY+vW8hbnopLawZ9lrbJOdN1e5aeQ7DwMUOhPFejiCfIaAUOBdglX4dvCT84ckhuz1yLAw==
Merkle root: 1b4480a4fbb367e76fd34ca26880b5c46171f974cf3a94f9b036b42e01723c56
Merkle path: ["33a4ee9c1e033d02e2943b82ece3819ce3c0e3abf784973f4d3048b444f85b42","a57364e46529451ab88a2f8a72fe354537ad1c1033653d2783402c78f92e897b","5a2dc512526a905d37e208f8e3c52868463b4392d3ff0cd97b4ee5268ff510a5","db827b0adf690fa30c7de35b176dfb2a98df50be6e11e6a6c63db275e9dd4740","153f27f45ad0574c6bca15418e79b7f59b0ae10c3a7bf1c23181b8a43f11374b","db01fdff91a61535594175dfe861743e094a1feee1e733a0a65a869a86daa292","8c3ac20aa04ab828e0fcd6bf71be00bef9ab87f1f44661fce8eba62791464d8f","48f60e5478be29c4b5c43956025dd8d7db67201a992819589b8872c437b9f52a","d9d6081c1f4a7a434d1ace781a171857a4facd7297386f83e82f8a8213d4e610","8c9c47ef779345beca6af83492439fcbb52df29c607d69918d6332fbd4916e50","143a7e1ea20bf5df1fba8b9ef6128f2f8152b6e598796581e27cea41948f2aa9","7a3d724d805a5f7702fcfd47a2478813d5361ab52c93ab520fd3692c70240ac1","05a90d241075e7f4c50bbe0b0ba3995ced328afb6f26ba9b8d7006707d1d2290","e7218144e850bd19a6bceecc50f33cdd16123e2542b211b07ffe285b3602d2d5","26c4d515b1da79ddf02519980ecbc6a7fec0326ec612e5f075735f461991082a"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2683258276 · entry 108e9186e8c5677a44df…
Expected log hash: eeb02f3fc88cc5ba2c672023b294d6863b311c6353fa3c9c8dfe9c0b1e584208 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788322016973","kind":"published-quote","locale":"fr","page":"brand:foreca","quote":"La seule application que j'accepte de payer!","rating":5,"review_date":"2026-08-06","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.foreca.android.weather","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1b4480a4fbb3…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.