Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Votre application est inutilisable”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
7cd3b064069a85296301e054e5a8a0a6d4bd588e4b528dc3d0610844fc975a85
Signature (Ed25519, base64)
nfciB8F9/kXwuEJZJLq1z6f6Z5Pu0WfpobbP6nfMUeLv+p4KiYYtlbFPQ5pidx1gDL0W+AaM4AcomIO3MbX1Aw==
Merkle root
42ee8ba4b974d737f78b7f168d0af8ea0510697ac4ab4c6db44b5522bd195660
Merkle path
["7cd28b4802a5acefb15beb1ae64113e5eef85a56fa5208ba584267b3a7f7768b","580557aae2ee5473463c944f5d06b9b5fd0e48271c43be56492908b1b0a5965d","ce1cc895165e632213dee3b4c8607f1b7f4cf055da7d2bfc453f06a6df60cd02","702e83b3c6a1dbe1fd6325d849c09568e826f57792338d5cc68a82dd1967d22a","c9e412d7c7f362dc66c33cc2234b43834658612be7e77b0da1b0ea51777eb085","0a7946bcd9c3e1bd10a5bd71c7a802676b6b4b075d3d9fc88c4405d9c5e63d71","0b25b04d0d24e5f2418ce74a1d92d84b5357754688489499ee08151970a7f740","a08786994cf5745c5442601f77c0c24570b2f2b606fd0b9d78591f077a20ab47","d845a7ec85dfe66404e89af2b1e0c6b0757465d3425f38d571c7fae600d8feb9","217a571ac9d06cef7c80bd36387a7e8a02d3d946a57178b83fe4dd9191359e7f","07fb8f04f892f1fd1adfae8c79cdb716d323a6a3f1cbf587f82cfa5068890f32","b916c7e35a75e421f166582b3f6908952de004bf398f5b3e366e009e475beb9c","31ba192f0d497b013b1face60fbd76eec62678c2633b6408daf0ef494b25d9a1","c77ac7da32c6d4db47aeb73e606322601c1bed1566533de53bf56d1599928d0e"]
Anchored
2026-10-16
Public log entry
search.sigstore.dev, log index 3272785693 · entry 108e9186e8c5677ad5db…
Expected log hash
3b93391ec0595ab5c0ff73f2540eb1322f56c3c1302e6789c57b97c74423deaf The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1792118508353","kind":"published-quote","locale":"fr","page":"brand:v-zug","quote":"Votre application est inutilisable","rating":1,"review_date":"2026-02-06","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id960378213?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (42ee8ba4b974…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.