Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“j'ai testé la génération d'image”
Google Play · 5/5 · 2026-08-12

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2514013184

Proof data

Record hash (SHA-256): 625c27c8658542c3c676d253998be166e845336c54e873ace003e148af3febe7
Signature (Ed25519, base64): pdxsh1IYkGPnAasvj0se8sXcEKkgtu9XosNUISI1mYxrGdRygbsMPFjsPCCRX4/HRpbBrF7nGYo97/sFRsFJAg==
Merkle root: 677e672fa444dfe5152ab91687c577772e13723ca441b5c8063508daedacfe44
Merkle path: ["625b312ea51698628de6633d40e4984b844fb4c01e9c018f65e4f15955c5e964","0a5715b4572c96bff06ab55eee89f58922462060b2d18eea147915aaa974619f","e77fc5a65574a1e171a07ab3c2a1e31ecc865fe98fb2cc0902a7a3c8ece61a86","3d28c6691cdecb4fab527e490993cb942a8a0a52e5dd7363bb86ef9da9b8e982","a505ace780df14c677722969ca69f1768a667c51388bdece03026f7138c4c8cb","d76cf7ffe071ad40ace11a9f6038c0d24154c9b9eda3fa496c4066d2c875025f","af14887cbedacb62b9ec6b1ed04d1ff3233b68c5626e1ccfbe354a62869063c7","1c1c0d2dce605f10be025cb73bde6b55003ae9c98c001b60e1f2599cedf47938","2f16f0d18c79c7bed8a1a8c850015411e888010125f5f2a72ef9e12514334b04","326b52c59ca1829ac3ae51b84ebda25e82b4c416518c8f2d17a0ff731a5f66b4","0b5f81c1397895a67fa0c168f5a03dd82e09e6398e5f4a199ab43883af912889","5999ce9331a3d3c3b42ff68c7d0c3b2938b4aad17e69c094bbaa432c5034da76","ef65dd9ebfc0d3ef62099f320670e0ff1ffa0aefd392ab7dbd6c1c6483d33d7b","3e9df542f4415cfb7321e531014c29668083cb06fd7805d6083ebd6b24fa289f","188420cfe03d9830600dc87f84622c41659cea53d9b8db8954bfc926ce1d4dac"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2514013184 · entry 108e9186e8c5677a6b00…
Expected log hash: a596e5a342226b61371cdf76b5c8be8e37a3d00e7ffe8f7b0b550e1a8d1459dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787122978040","kind":"published-quote","locale":"fr","page":"theme:canva/quality/fr","quote":"j'ai testé la génération d'image","rating":5,"review_date":"2026-08-12","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.canva.editor","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (677e672fa444…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.