Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“L’appli ne marche”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
36b5b7faddb60df33e438ed2f7d75a89acea932919f330515f933f25a8986976
Signature (Ed25519, base64)
3ZLhThXUgcrAuelZ/iz+BmokMwXODj4rVVzLZgNaq8Gj4GclO6vyqTo0a5bpggDRrqOtIXTUf17i8pfTBvrwAg==
Merkle root
ffe0abae83fe32534ebead9dc4840cffa734701988d7729ea2741c63ce333209
Merkle path
["36b9a2a57503cb0550ff12fc93ed990f4818e0a6dcb746ff242370beef57a4ed","b500de876f68e3c5370b157e0d5cd5318835fe9ea7279487090d083624d88e64","94e01023dce4ea426498c9b4b442b1034680b21647db1a78842870e20d124175","b52bb22b3e8652c2d8dbd41e70b64e1cddd63ab69428fc38c7a827e0c6a8e123","b2b2f8c9a7a449ab92de8a25f701f9c989f73450db4c5c25b68804e28991b620","437039a28dfc5c2d3536db0ecd9719fbda3187499cf313523aab0121e54ab3cc","4c8bc490ba09fd0197450b677ef51a1e516a806e165c9c9734f4ee94366f4744","8a2560cdcb0451ef017723b91726a50252fd7f3bceec15e7fbfbb29f1dfbe7f4","7156b470190bbcd8c961823edf8fe593ecea194910c0bfbdcce948a65dd1ed7c","c1381cc4a619825927084675726c148dab7b01e877f3f32555df46e73e02d30b","54daec72ffb0503d37a0f793529682c667c704aa410d176c51b5fe58cf7ea235","31d5597561dc922eb112c0cccb4fc21d146f5fcef7f4f2ceb7c27751d6de78ae","31c7d8e3e9ea60e2c5c4aaacdb6f0a5cf3fae833a71f182f0376238c42986089","a104e1c95f5429ec272490e6572eeda4db6dbedfc04ee0f94200f459c1d02cf8","4742e9987316174c17377563bbb971469480b811c365b9940f38dd437d53482e"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2671929919 · entry 108e9186e8c5677afaac…
Expected log hash
b7a1aa2befa5caac7007c0b2e7b21cf5f700349fb9119336f4b3c994326ff20e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788240211764","kind":"published-quote","locale":"fr","page":"brand:css","quote":"L’appli ne marche","rating":1,"review_date":"2026-03-26","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1133551270?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (ffe0abae83fe…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.