Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Application plutôt bien conçue”
Google Play · 5/5 · 2025-11-28

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2495260497

Proof data

Record hash (SHA-256): 77749e1a4679b33a9dff45ddc6e990b9fd762aab0032f65e5ab8509ddec6d024
Signature (Ed25519, base64): Kn2gZUafOyBtZtcPE77xVUuV5W8ZpQbsHW5YlMmbp9wxOBcoiHVwz3rbixJUUwqDOO+cUeOkos7egvW8oianBQ==
Merkle root: c0f03d84ec6a08e9f47227502d608cb4b9559e04dbc44c0c60dd009e5498fd59
Merkle path: ["77713478a946a0348d292a1d99fd71d1220d69481fec2fd0372d518763e8c3e6","24f820dc7023a2dee79b590a3e71ad2678d73045fb29c7f91e69151aa31a5cef","28bb69fb5c799b6ec7a1ba975f22c9379b24db4fb6661b66f0c3b42dc5214894","1e6db9188bea528b2818bf8db1b39338747b00a5b7c51f085db1e9a4b738d251","89c02cdb67af3c8975b16b5d720e462c52937b58bae964739a52b9b9de344568","9b6042a9fb967aac304945202f9ca5a081cdb4dc531f38116ab7566d847d88a6","e36a5cdb79195d3325c9583798db3eb7fc94e8aa3ca55320173f131c38823a05","5b1285f86ca2c0354698f1c36216378161363259a28db1143eb5fd47f4a64637","69f7f74d663ebdc383f9b0e42b45e2a2a7f38c728b5d01f509e4056c03659690","1cb9c0e4817dcc0f3e9d19c4111a9678057687b10b4357b9372d308bfb22f854","02c3148e2adff522cf2c7f8d7224dd0e910112166443175735887231ad8a286f","8015b62bae2fef5ef4b65efe716cae699108912ee0747d82dc0f61fd68226de3","16b9810f21a8fcbcdc67545dfbf94bfb5811490e5a68aa13ea21d65beabaae35","87146d6d46e536fc4e22a9f18be1850021ba6f043db2cf362c830947480627dd","a4d2a95b8c12efe70f0dc5df164839a5ef796b8ba35c8ba29774bce65792792e"]
Anchored: 2026-08-17
Public log entry: search.sigstore.dev, log index 2495260497 · entry 108e9186e8c5677aab72…
Expected log hash: c37699e17d2ce6398bb526dc7ebc97861528e4e938842ba464fce3230eb047fe The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786937421185","kind":"published-quote","locale":"fr","page":"theme:findependent/quality/fr","quote":"Application plutôt bien conçue","rating":5,"review_date":"2025-11-28","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.findependent.android","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c0f03d84ec6a…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.