Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La version de l'application est inutilisable.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
433050e518f040a29887df1e0b9055d947d1c429ebd5364f781bf26527670b21
Signature (Ed25519, base64)
I1bco5DdwkGAlQhFYE+XqEzZZ6mPnDHWOkwTVBVXuGh2R6Sf7cmlw3ZLNlzUmYUmxIvWb2Ln38xcD4tPZQf2BQ==
Merkle root
199738dc68b66dcf66f6b0cc77e2cba74c3bfda88989684620837b4c4e64818e
Merkle path
["432d1aad1fa6dcdb734cc953af8a0efbb853e40628755d389d1846527a5126a7","224bd1d17630219ebb509a49aab1a7b2758e4d5a36eff2cbf27538d1a4a2435e","f9c49a0012d74a74d23d00b243861359cd34bd1f60c964657e4ac19fc8f0e0b6","bc380a867263dfad91b44d826db5f1e56c8dd72658ce282e2d4ffd388fff551f","bd4802bb7cab9ea54fae96a882fb2e688b5645e014411e732a694caa520651ae","74a9dcbf2ddccc380228d171aea2dc6e045db77b2694a5732230a99641965eba","c7417de3ef5a798a26cdad4d824d15dc0d85d24c97bcec562f91b7b2f48f8f08","b2722d82e9f1edae03402e0ef389f61af40d471ed344a5f4e627b5d8feb853e0","d4896ad499a4f6d2ff3ee5aa698b3b5264ab44d1d6c6647091d808eb4b415d1f","bcc89037a49902a3c70b26cf633524ec038892760424a444a7fde7afcd652bb4","4819cbbd871abf60ec554a51473e2bc17ce4d8ef355170e3a704c7ca1cd1c9ef","793a0a113c6896c3097aa5fd875e658514ad3a060dcb3a5d23abdc1b4da18d9b","5dc6942b342fad0953fd3ad3bc002a6e4d6bf8c4ba6db81c1c43744a0d2c9996","ddc8a66e59fc8f0934334cf08e419f621290129e658cbc58d8ec27bafd90b0af"]
Anchored
2026-10-11
Public log entry
search.sigstore.dev, log index 3198797320 · entry 108e9186e8c5677a14ba…
Expected log hash
46227e67415cdf5b62c43420eb8b7a80b35acaa912410c2711787f678b77c9c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791687727006","kind":"published-quote","locale":"fr","page":"brand:banana","quote":"La version de l'application est inutilisable.","rating":1,"review_date":"2025-01-12","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1146829835?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (199738dc68b6…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.