Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“L'application est très simple et bien structurée.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2495080079

Proof data

Record hash (SHA-256)

667a67167031351c817bbbfba4f5e1b6b351fd998412a673653e4ff389489803

Signature (Ed25519, base64)

fTfm41G3XVCzaFhW7PEixwbGVo2S8dxaaYCtrjFedjtembCsH08B82L/aH7e3uzgdU3PXwArXgZx25oJJnLZBQ==

Merkle root

8d67e2bcf9805e0b1a8df77606b15acf66159247f8bb79b05bd35275c0fcec76

Merkle path

["6679e778c09dd19744a453965cb5305a8886cd4dd65c3bcad25909e95995d730","401049becc59b7c4c5d8729acce7cbea3c614db6dad6b686a5abcd9d0c40b720","62feebcb2b42dce7e5408fb5fadb4e4682fe860d34b81c453483b767e22242b7","62e4027865fbb4deefc620210e085c634ea077d00f374f72b6549a6de140629d","509ef1853ef05e38e3637b255bb7fb1e019d7c9bbf48c65b1e6d10bff5900489","8420444b662ca71ffcaaf89fd5642ee60dd76680149985a4fbf5a7fe73c3c15c","9f5cc34d2aeea508c9c94dd804ec53468c06d30475416bf965cbefdf936a7b77","023bde31aaf163f722e63aa8e054d8410716d5df041f89b648add0e615872c06","91b084cb63612f28dff112189029e23044e3af2009eeb8723bd6ecc379593f66","5ca3d6fb2509ce48e8781a67fa8d19bf67e2dfe5e6b3790f2b36171e25c8b8c3","fcc675c917c8969b827d51b312c1ab41ca46ead87d39fdf24c1f42b6ed201ccc","d5d8fdd0a90c3ed60affcdc2e7561a9ee5786d45ab6e20c6e79fe1cbfcc1d41f","523aea1f0f306d886bdf6833612263846467be6194a89ee88f532fea96941c02","ce0b10b516be0e5400d450b53fe2e6a69c127d4d65cc0d30c91f36c5854d14f9","97e661a2eddeb4928d5775fd03d9ccf894e37679b396aa55e3f5afe96403c473"]

Anchored

2026-08-17

Public log entry

search.sigstore.dev, log index 2495080079 · entry 108e9186e8c5677a381f…

Expected log hash

8f1bc5fb0544d3d4a0f1a678042f499dfe582d5da406706275fbd6afb0904596 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1786934111436","kind":"published-quote","locale":"fr","page":"theme:findependent/ordering/fr","quote":"L'application est très simple et bien structurée.","rating":5,"review_date":"2026-06-26","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1510962836?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8d67e2bcf980…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.