Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“L'application est très claire.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
586a34fbb041e9c4eaaace3d8f26e5a00cebcd69439219a12d81d009fbb5b889
Signature (Ed25519, base64)
Xj2prUdg9dcUAJ+Uul3nS8EUFKl+XB/nC3uFxzGWrmlF1kQ/vdztxUfJSTNVMhY/7ngN/QtztNwJpzzcVNxBCA==
Merkle root
4900b1080bdcd3b4c9234f01647614e7004e0a1ae01ead44968e31abeab33265
Merkle path
["586ab6752c2e78327c974b6495e764542f20d5c38bc32e3c6e8eda8c8e48b8ef","44b1e9e1306c2d3530e6f0418b6efd7ad7d212cb50260d2d466df9062ae0c140","89000537101752180a29e067420d595a6c015da7503970487025f3f954dda02e","289834148fc44d06fd85aa18bf52a4da20494449fd00e9b97fa7d3a8ee0302d4","0adec450071153f11be3596081fb091d552be83e082e19855703d9d4ea3d326d","0b373b7d2ab0c10d69d5a351ea1d58c8fcb51998d027edb3179a4ebe9714e049","760b5b1d1b4b412fbb31a46192145fc89ab8e261bcc112482b466d846030040c","2586a4eaa0301483387fa31fd3f73892f4ea582fdb0a21b5fd817433ad78983f","d3c24a120ee18b8d54b241170047c175848c14a8c1ec78e7ac5f9c818f770d6f","6e306d44c3bbf63ce227a4257ba5e05acfd1629f02466cd29f5c80ac63fec52d","17361d2175a6014fc2dfa30fe0ba75d32fc3ec969aa9434655602a07b59f72e6","8bc3d3342d538ec2e52c4659d41fadb97b0038a716b891902f4266532368bde5","fcde407cd823adf65f7404afd4b1ba5062d4dc9b443a0ef9b9102b09f040f91d","0a4842003c61f69c5923b6aafd56426e7fe934e483f7d15b620c07fa61f89152"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3241341297 · entry 108e9186e8c5677a0e53…
Expected log hash
39342fbb95f8cce5be4111719e5450984494edcdff99b8bd9a5c0d2303b67943 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791866192176","kind":"published-quote","locale":"fr","page":"brand:concordia","quote":"L'application est très claire.","rating":5,"review_date":"2025-04-22","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.concordia.myconcordia","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4900b1080bdc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.