Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“il suffit de refermer et remettre l'appli”
Google Play · 4/5 · 2026-08-04

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2682517241

Proof data

Record hash (SHA-256): 340d622044254d3de35573de813b5daf3df1fa1e9fd113d063de2363558c7040
Signature (Ed25519, base64): JzFaYy7FPwrbzrjdYXlSPlFzXp6QREqheguR/KWE+G0a7+/LeAEja0zFz+7Hr0vvnu5zqS+yIbh1oc2PcCUHBA==
Merkle root: c280d9ed12ff4c0b3255dc7898b16f1930cd4119f42946bcb4cd68d076a2b332
Merkle path: ["340d16c934811fb9335df540b7e36867e1286fcd7c3c48217505563b8e6d5dd2","b19d22815d7cbbeb45c6e8e1f90a5a5c83787d8eb35b64e8fda195900e87f164","6c274ee043a2f18bfe4a833da506c47a4b305a6c5a4840652a46c9b846a17fe4","9830aece39242c52e33da46781d461bf652182454a7c6c8fc2d336f85400a1de","d9a017b2efd48809e1888d17e0d7452cbc6c758b8396be6109658fe93edf6e56","eb1ea66306fde03de07c980a3b1643c3122b423132f218320c231d4f3a4cba5b","f66196ed461aaf3d936ddcad5c67547af62517b947f3c9df21aaa166e09e099f","2724e1ec6b686ebc8c7b136c83ec9a78c2f9a14b18c4d8232b9eb782144a5412","6daef06447cb1c19c84204dacb6ee304e4bdcf4493b1ddd8770175c3f84cc475","32851a5757b0eb63411a49f6c7a930770b24c63c0c7e6791f310ac17164353c8","eb35bed92c8284baff08b6db71b7d209387c27ccaf7e837a2f4df410ff3d9640","3d560abfcff65b1a19ec0326c7e988271436065b4f62a509ecd4d77294aad514","ca23861ca0532e338d066b3ca3d28b14dcf93ecd8a0d98efa646762829e13911","1bb9d77697b03c52c52f610920bf29cd71b9d55ec5c24ed66e499e51e9290526","318e458e36dfc92952cbf790d510c87679554507275d835c305b6eafec626494"]
Anchored: 2026-09-02
Public log entry: search.sigstore.dev, log index 2682517241 · entry 108e9186e8c5677ae940…
Expected log hash: 4dd627b405b5e14bbbc331be73be3f78a12bcfd7daf600ed87868080d5d2f664 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788316240490","kind":"published-quote","locale":"fr","page":"brand:foreca","quote":"il suffit de refermer et remettre l'appli","rating":4,"review_date":"2026-08-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.foreca.android.weather","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c280d9ed12ff…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.