Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La version de l'application est inutilisable.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
4d80c02f216f5a863a31d0bbea555fde7a4596aef89ceb9b939afd6b46131898
Signature (Ed25519, base64)
zkrbYIXPo0bPtKECzYwIL9DLy8Fa4hLGHgL+TTDd8soecwJ3/AmnOnRnvf0rHsU39xey6dWkEKPaMKMESFWPAA==
Merkle root
e880a518ba68bfe85ddff87a241b258528b2896d8ce031c201c4697c0b7d2205
Merkle path
["4d821f6f4648d390048591b9a4b1a1e28e9663ffd49c4beb6c01b75fa53c8d56","9bb5cf4335d30ab5dae8cbbcd706806489ca1d9a2b2cfd2fbfe49c81c653cf35","634d70597a12abdac5c5fb34e69e17f9e92d92a9ae57ca47557c13268014ef45","279bee18ce4ee77d27698fe62d9594acfa46b359c86dffbe0c32966b89d1bddf","e350a1541273a3b95c53d0c63bc102c7fb9d2ae8479e906a1df5805ec847271b","cea6ba2a63c4a62e90a68f4fec827dbdf581f2519d9bc95414ab8af80307c35a","57bbff7250aada878e8bc1b4cb3f662ab682b1e01439757fb020d561e52caa81","f4c64428582d23d117dc679b0fb46cde4efd4bee1f3e9d1bfc9fb596df0f5daf","6b6e17d659384888fcf3de652b3760672321e99fa00743d88883255273957a9d","c17a45b7121963cfd5815f79d8caffa3b5c1663b2c4f4bcb7fae297c04c56539","05082b1ead475ed6c4829c6a58445cca3911917015c49cb8bd57efc3f2c97135","8313bd84c1d27ee36b256164d86eeaa2367caef1410f4bf071112a9b2f8fd616","b82cd14df0b3d85584df275a944fbf2d2903869ea29e988f14fdc663ca4113b4","8c997d59f41540bab49c6414578aed00ec9a73fd31959523b43a0af5a2eb1e86","269c643459740a67a842bbee9fda4a35b5098a4f015e508a69431212a0912770"]
Anchored
2026-09-01
Public log entry
search.sigstore.dev, log index 2680681799 · entry 108e9186e8c5677adf7a…
Expected log hash
23ab6878cbb153d06d6958de44ea3fafe32bd61b03ba95bcd26de9e09248aedb The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788297623062","kind":"published-quote","locale":"fr","page":"brand:banana","quote":"La version de l'application est inutilisable.","rating":1,"review_date":"2025-01-12","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1146829835?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e880a518ba68…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.