Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“C'est bien dommage!”
Google Play · 1/5 · 2025-01-08

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2621031423

Proof data

Record hash (SHA-256): 6f303c9f4f8c40d6c1675b8bad705291738492951ad7d8cd32e46c6f7b226109
Signature (Ed25519, base64): 4BWCVtZs3T8YHRz3DJk8LcALplFiKJmUayDha0QpNxf+VdI6etSb0F+A7pKDbxBRqzTqMppqGl6rl2qgsws4DQ==
Merkle root: 660baed4e0377456de35deaaae5175a04c7f97eefbd7e4cf12622ca3b4d2f1da
Merkle path: ["6f2f13083ddc0c1d82c0a3ebe2577271035c338b62ee6313093c0c9365f79e71","01ddc83dfe03bc3907c29c984306d698ff18c6d8284d1f2783f8c4c332c34468","f4d706ea0343a7ab4b7ab897f7d7117d5b2e50c4858226d57c61113803759859","0bc02fe396d698d3ee40081b02b8e35792a04d64d49ccdbee2bbae01e0b23f1b","6213ed7f75a407ec96a8b90f092b443c3fd9c4c37df021984c733533f44506ac","c99638a94436acf1f5cb8a0e422c34769228c3ce964c6c1639de4e06a16e97b3","1a8861008d6e2c862469b9767a394c98dec9f2b03bb5c2516a47c2aa9a540d4c","831a817b248fca2c997f03942add4b0b7c991dcbaf1c472d7cfe4c0d89115f00","4e26b15770c82709dfc21e0dd9e16a5e5c531aa5b62d8feabe88e43f43a38bf8","c024b10430fd229b169f96cdd2d963a9cfac666aec6c32eb016a40c85127bb44","26dfecda89847e0b52363f7d571ac30c32976a0e990d88442f32e71ce8be754a","4c9fca66baaf3494f75123ea5e02bf5506cf65aa2468c56f2cd8d541f60c38ad","b809af0cef6a71d6c7a3a973da788ad51b20bf3d03fb19b213a0674b7fb98fda","3c61c51ee10d1aec06aedf5f3f18ca5e97f865de06cc97a5514b68e3f26c0cbd","5630fa9d6feef716b6c1258fc5eb760f694f65295ea9e96a6c74458fa17dbda0"]
Anchored: 2026-08-28
Public log entry: search.sigstore.dev, log index 2621031423 · entry 108e9186e8c5677a00b2…
Expected log hash: dab7f5bf20d800f31a15ae5236ac5dbcde0614ca00650d0e0adb5266739266b5 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787882628316","kind":"published-quote","locale":"fr","page":"brand:drawboard","quote":"C'est bien dommage!","rating":1,"review_date":"2025-01-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.drawboard.pdf","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (660baed4e037…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.