Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Facile à utiliser et à configurer.”
Google Play · 5/5 · 2026-08-10

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2754384098

Proof data

Record hash (SHA-256): 35badd032034c5ea37e41c9bbaefe3388fee19a2fba1eba5109748806df9e986
Signature (Ed25519, base64): bB9TvvMmAKh1X3tFRYkNAUKRU5U0yVAmthoDHATwhh745IUqz+s7DDOi7AjYYzWWUKwlYXu06tIXBvpXD5VDCw==
Merkle root: 2465e26c4b328756360cf3c8bd618981f983464c9d48c736d4fb91963c7bbf37
Merkle path: ["35be90edb8df407b880abd888bc71a3421afde37c4dfdbdcf1155073c165e2cd","a8a4f4903507589d6851cc00e21fe1c3678e47c97d3e5df8b3503ea09f785aed","52be8a768fe2c38711c2610c755be3b32f8c7f9bba57c7b1e63a8c7ffe51a972","fb4a78d94c3ce33f068be768241599faabfa9b51e14ffb8fcaed305ef3ea1d39","8c54c5c62a7086d0ccab3b22d1860ffe8bca5d9d76693e7327c39ce31469a3e7","b3e2c507e3a8cfc706bcef6cd73b4421cb9d2f241d834d3d5286106519668adb","ee33517a7b471de677b58d3a8ab363825d6b22f9ebd21d77c6eafd75b0bf6cce","be1c179e899df768ca7b61b049768662792f906a22ad91a9345d1e97c2bc6174","2099f551e77b2bb88fa72aacda9300df9e95ea49603dca8150f53f6de77e8cce","df74cbafd905d9c02ce570183391d19841fa2e69c1e2a02059b94e2db1d151e8","e16d910099c3328157fd17108198319e658269d4d5e76a62fe7f49fac215fa3a","17b26693478e8d259679fc052190703b2060fa094ec5899de8fa627f561f17ca","c7160ca7c684447ae095aa5b243a39ee20300ffc34c98090cc8012cb0e6f00be","9a0d3502258f00e9b24fd47603847077e05b6024ab65f18f18ec973932102f2d","e3610f98da8c8899ed04a68ebce82a0c000eb56ae4f4b5310bda2678744b0012"]
Anchored: 2026-09-08
Public log entry: search.sigstore.dev, log index 2754384098 · entry 108e9186e8c5677afb21…
Expected log hash: 0b88e9e5312b5a2c365a5b5596b5d4c442b848d1dcad6ffb77cccb8d8345855a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788819235128","kind":"published-quote","locale":"fr","page":"brand:pcloud","quote":"Facile à utiliser et à configurer.","rating":5,"review_date":"2026-08-10","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.pcloud.pcloud","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2465e26c4b32…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.