Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Elle bug sans arrêt”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
36994906d52dd1f1d9ed6087f78533b336ba16fa3e23835c5d0f279a6d86547e
Signature (Ed25519, base64)
6eUQExsK0jjRWugkUuuIcNNe46n1pYHVRe0CGvWO50YJOArmC+NBPSBBfpuxch34sojmC4fNaT/P+H5e6Jx6Dw==
Merkle root
57e60dc521a4ab8ee39747670ba01310ec9c3f92c64800e03425c0a645a7f8c3
Merkle path
["369c6afce30af7bcd9bc69a6ae926b025c3025e38897db626d1a727318e149dd","96cb03a5f205b130850ff7c46c7636215ae728deae242a3c2b6fde31b9f81609","cbd681dd90095c566db33b907cf5869461f0ae0a93d2d6338b0fb52dc9ef3ba2","a2405e66ebbec4533be31789b16cbeaed3c3e23947f9d35e3f088b0475f57514","7ecccdf152f7c77e6a31a65b724f4baebaacf231af1047bb87d95efa9fc6b336","071371e03c2aa62d7344189ccaf0e04de42f8fea2d193143ecc2473c73441c2b","e0274db103696bab8ddde3dd665e96d2b4f1846d9280f446d4a26ccd38b61dde","81a25fa9bb7726b98ab53d6f62ff09babbebb99b054f9a7ac986fb899ea3b685","6b3ad7a6f3173199d203997496231ad14a0db50c0c97dcc9a5fd063846e46944","853c139873728eb4598b82df31912527ad02e6490ef80243561117e15a08ebee","7c1138541477f7181570c84c532ee56730e2231ea361c3553498c88d7634119c","c50926dfbac5b706f69331a8f75f9cd5e66e540a072bb3ef5a5717a10b1c3b7f","685b03bfcdbbaa8328139aa04b275328be3c88e859e44bb5414b657fe972a4a0","dcda2bb48f4a1ab26f6126b1aaafb184e5f8d3630133c0cad42caf115918a81c","a1d5535cf9f405ffdd99d322e20ae6357cbed1419e88c64471b565623f0a674b"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2684249937 · entry 108e9186e8c5677a47d4…
Expected log hash
46538ec60065603bf54101fff011eda05a02a8a062bf118596692399059b11c2 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788336087966","kind":"published-quote","locale":"fr","page":"brand:salt","quote":"Elle bug sans arrêt","rating":2,"review_date":"2026-04-28","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1258680285?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (57e60dc521a4…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.