Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Application très complète”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
6a8c522092a1af1b2ad5d87cae2ca34e3b6fb63ae7aba649002da3d792934be6
Signature (Ed25519, base64)
bxPgZowG1ALCL63cw7OXqd4S4nlcCPLVCU7k/KWZk4gxLMLC0o99lpZmXDdYiRJx5ZtfZnRUsx0Acunzsz4TAg==
Merkle root
d9909e7ff193b610d96d9930fa8111baf2fdaa08b732478b03ded2b9e1e52914
Merkle path
["6a90f003584f3c80c70a997fdf32004e83429180756149835f91de8d96938655","9a1ae9d679452907ef29e9c532ffd40673f0f07aa57a50eb9cec52dd53e4b87d","754cda60717e209a3f8ae0d0c6b381e5ac5ab50dd843be9e8240f5fcdd56b62c","1f2870e6de7879502c0181970c67334d6f92cf637f1f15b6b36ae076419716ad","639358ce417a9f58a2f80fc50946f611c4889497fda04ca496122a6cd2d22a64","b892144de0eda1f76cf02372b94db004df45f088cb98b37552da4972fe6a9cc0","d06103f1336daa10fbf6f94693d43bffe44c00fcb8411fd3b1cabd67090275fd","addc3c4a5c25e9d8af772590334747c04675a69d2ed2a9625c6fae32a857a875","9fe66dac555872f870f4b08ff1a25a81476daf0504a96caa14ff553d785aa525","4e36fc1700cec52f9dbb8f6a03fc19cea6cd3a1a9701b7c3629c48ddc1524311","ab71616747f3f313b6208458f071ffa1432ddf6f9ada13694a8ad71da3536162","9674e4ecef5e17216d02256f30d1a12e9bd64c829be82392db2ad16d9e944e26","fe512df538f31c12d9084e7935c17aa095161d0611453d225ad85718977c3370","fbe51c186e2797045566a65d4e8ac09d80335ed84733c00aea2f32527a4eb0c2","2aa33c224957c89d7d414cc43142ae7c4368efde4f1a1b6051ee910ab17bf997"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515095234 · entry 108e9186e8c5677a299c…
Expected log hash
6f0abb2e15f57da153d99eb9fe756fd2540bcac51fcddbf7ac60c4be3cfb5f7f The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787136684512","kind":"published-quote","locale":"fr","page":"theme:canva/quality/fr","quote":"Application très complète","rating":5,"review_date":"2026-08-09","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id897446215?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d9909e7ff193…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.