Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“le côté application c’est une catastrophe”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543025731

Proof data

Record hash (SHA-256)

3712a1d8d958026ede37e506716d5f659a0db89db25dbdddd43148a3eb541b91

Signature (Ed25519, base64)

Td382GAKyt26j0QCyMfjauERhLmU4BoJDnePRiaFINoZi26I5m7qDddyyEK4uSEwGFuonqhA4GepwZznnOqOBQ==

Merkle root

172a3e0b3c9f8b02f52318e01ba6beb899404e00e91c15eebc4dea38467e1404

Merkle path

["37118494cf561f67d5a1d9a448389a66d743f16382527c5f428c32d0bfb44b0d","74b4a752605400509fb179d6ea0cc8f6849bba372f73ff7b63eba27cde1ec00f","9438d3396d6f0aaae6da9627dfcb2cda8a760d19dc11331c5e72cf9ba94897e1","50608971c910c22d03b9ff3a766088c4e84e6191f2e5ffc305d917b274fdff93","b08da026b1035786ce50dbc9a89612ffae1002709bd844578b52a769aa670622","3b185bcbf346dfa012e7f0eab9d108ff76826fa74c3e8cac55e1e2070d6c15f3","d6e09c8d4fa89c00bbb3c945ffeb0e988ed9d5f503092888a114827f66eaa3cb","1184f61802fcce0e39b86eee6cfd842545dd88b4e1fc28c4a9f33febce87b4d4","76c2ce7c90c8a719dda45b27a59240759a8b3766d44cb0828da0d8298d12fb10","618778b867b4b9e2c7938de2530c9f93050ddcaf846706b055095f6c96cbcd87","05ef8968dbe470db7837f3db8d2ff36006bcaee1a39238d5d50e30bb4bcc880d","e477fdbcf6b063496ff2a3252cbfc14714816788e388193432a67f7882370e8d","09afb18deb0eeaca577b5271c183d4b7283e7366611f65ab999ee122c433eef4","b2e250a62b44b0b9c303f91afd3aac8852fa6af504d7d68ed736141a3dd71161","7731d0ded4f51d151ea3e84474d1e27a6279e8756420c93cf5fec0abf7f11add"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543025731 · entry 108e9186e8c5677a8971…

Expected log hash

19ecbe4a66d8adbd7c6057dbf6ed9be73485c248dba1e0c595279a908b3e8bea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787283443958","kind":"published-quote","locale":"fr","page":"theme:infomaniak/fit/fr","quote":"le côté application c’est une catastrophe","rating":3,"review_date":"2025-04-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (172a3e0b3c9f…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.