Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Peut-on recommander cette application à des amis ? Sûrement pas.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2513934798

Proof data

Record hash (SHA-256)

4eb1969d1b7b0adcf01c3147f9906956e87fde5c46168a2f22c33bfc4fcfa1c6

Signature (Ed25519, base64)

E/UdMQEy5tiWJJSlpNR4+ovMvVMF11+ee899PZnkKXOVkk4ASfKucywwUWwwE+l0U93BwT5208Bl0NMRDplDAg==

Merkle root

0148d24ff6e9c2ab4d5b200cf436fcaf811faf144951e67c277e5df63df916ac

Merkle path

["4eae1e38438a8599d49b57c8523b5841cc54021ec25712760aa32f01a2b423b6","beb7a653421124525f6a958be60882cb155e3c3df4214f3be8e0f532d4fbc861","d4d146aea465d85f111dffe246a0881c465e9b3cf3aa6536ac1b992a296938d7","a129bd5d5bf065808f216c1218255f535098fde1dea53dc244eb2f39d6eeacd2","a4695fd94e51f6916b74c90ae12d00ab3f64cffa79878f95b574bd74866a895a","05050645f7b8c1b726a9c72030849a08abbd271f9002b42539a1b54f90b0fb45","4664ffacb9a140c08570ae2894c09b3c7a562b28cae115a258894c15a51f7f90","fd36768cf00663c2326eef02c195d0b8fcf0f446b607b90287d4021013e6e7cc","67cdbe7f61e69c31f024ac3afc73099d6a3da567b70aa5c4a2da7490993f2b57","3a47c123efcdfd6024eb451729e0278b029028e7f3d3d29d11960e522dbeff6c","526a50a69e29b104b6ea99b73520c45368c0b67522a0046b9be69abfecad9944","11c3a5c9eec0f15a49ca9cf5f8fde56f70405acb30708fa55418652dbcd5eefc","ce0dbe870a4a4e9330a28d81d72277f5615460c19d168539220cb48090e80795","94d634e519e6d7de4794c0ce09ca16c6cca04c4fb77fe27354f6655f0f9db8fb","eefb32e3ef6dc5b176b5121ed7a7991ded7d89d0f08c50d4493143d001bfb6b2"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2513934798 · entry 108e9186e8c5677abbfa…

Expected log hash

4398d73a28baccf419c99b11cbeb8ef2e4242701bb0cc17960e1b5f329faf480 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787122088277","kind":"published-quote","locale":"fr","page":"product:relai/app/fr","quote":"Peut-on recommander cette application à des amis ? Sûrement pas.","rating":1,"review_date":"2026-03-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0148d24ff6e9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.