Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“C'est très cool cette application”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2683384390

Proof data

Record hash (SHA-256)

35f76ffd55069a88733e006873dcfc5b2da38d6ade41e6ec32d69e736c4103f7

Signature (Ed25519, base64)

e7wQockgWW5bRRWkqM/ZGDDmcVdcT4juS9yg3h4yNvaiYPxJ0IRm7cAB+HTb3S7itRw49LXreYt02qFRV3WxDg==

Merkle root

d4c4aaf139801abe64089c6a646a11881b578559d9cb7d88d2fc9332bf4b830b

Merkle path

["35fb53899d5928b4575d6948b73cabdf5e502a360a21204c6fcdb20c26ac70d4","a471f0e620440befa37871c8c14bb697ff7bb53047c6c36af4a17dd4e9f1b287","d1e851a4f8bdeedaabd2840d697c285c16a64b3526b9dcecd72b737cc1f21409","9c37e0b8efd343c797925ee5afe422cc57940e8e2516d485351fab251e1964e3","3555c038fed9e0b717de6cc3530dcf7dcddd77299c46c09bf5728049dbf3422e","9844047ea391d3742761d6ad8ce0254f28f8c151493dbd3556087ef492f9b900","b005dd695630935d9432d8637b44ebd953aa23d0747513425f8ad04ec4366be3","6e759dbce7740ca060e75ad6b7ce2bb4bab14af6013cba05823c8f4e5c010b5c","d33964abe52f7d57a51ded2c119a8898b7ec0d3daefb5fc77859a5487c03b2a6","d48b4628aa6416f2d53de0ae917a7b209a3335bd8434ed39360c98e1f1327f42","d7b58f35b1b1ce1b12e05ff19f760236967963831206b2ba1404662ebeb8c3c7","6fbcfa4079d1058a79992b8d9a70b2ca43b8c2bd2a205f5f3c6208c7c4ed37d8","ffb133066a77f2e306bdb0ef8734103e8fd9fe30db508022f3e02b358231e536","ef527f45d797e2d831211fa20aa17755e8de8cd626bcb27abeeea7640d159dbe","9b3fe954f7b51d7ce6fa763f00e1815ec4c70f892ca128b9deb83a2e107b9fb2"]

Anchored

2026-09-02

Public log entry

search.sigstore.dev, log index 2683384390 · entry 108e9186e8c5677ab9ad…

Expected log hash

911a6ed7ed419f928c9567229b2f9168f943e91a3951514581f7a3ba93db232b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788324112523","kind":"published-quote","locale":"fr","page":"brand:canva","quote":"C'est très cool cette application","rating":5,"review_date":"2026-08-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d4c4aaf13980…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.