Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“App horrible, je reçois plein de notifications en chinois sur mon téléphone,”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2515439294

Proof data

Record hash (SHA-256)

89a01f18a3d3e59211039aaed9024ae7137f5414581ae000ea05f4e4051ef7a4

Signature (Ed25519, base64)

Gs7B/IaAfG+7DcYvO+GmwDk0VBqvW5UyluA83Y7o18Zm/YzcputLE5Jmb+vIYW84lGJAF4m5GZ4tPHAZwU1CCQ==

Merkle root

8c6268a14330d1a3403c561e774645b0671f81571ec1735d4674ebe1de7502e8

Merkle path

["89a182aab736adba8d5775c7489b92035236065faccc20c28146ccf696eb6015","583706adab4065e1dc04c11d2d0bbe470fc40c9104f2de450e70ebdf554a3c34","0097f88a82fee13b34287fcb1e36085dea55d2937143f90855753e64a15f52e2","88433e2382ca8d1ce086a41127a21357e2bf496e10d90602ef8df9921349f80b","e09ebf594434ad4d8dc3974d5680850619e5bab5d2fc526a0d49d6c2f024e1a6","d744613c8268412f0d96ec9d761d2c15d994022665defd56c2882b3c42c3b7f4","77402b8d498ab5c539298321bccda783ac3e12ae0d4e9a9c27473537f8d3a45c","4691f8bb4a23087945f170f977a94d632fbd7ff90ea262a60dba94267a65d602","a85667c9ddd01e856967c1b106696ad4c21033cd7d6720c2863aa83fb6f791c1","7b0db282290880363bc86aac9d784ba30ae73b05deae5ed52584cfa74f3abe32","6973ddbcc41e8440e81d139dffb1ba2e79548fdbb32a6af1d02567db1e6a54f0","4ea9855779d1a37095103b86d39a1c6539538ba0798a95747d0e121edc8e0046","747ba0b6317c3750e6242affadccbda44b868489e275092a024dce997ae773a2","3a0d3c267d2a0d179768ecef7d342dead457fe1d4866ccc6b84c72a8362e4b38","f548939ab1bb46e2c6638c372c3e2eef0d561ad18c63c15229fececc951e0b3f"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2515439294 · entry 108e9186e8c5677a4f15…

Expected log hash

128701fddbb19410bf57cdb2d04d7a0278d13bcfda6410d76f176fa58341e1c9 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787141082461","kind":"published-quote","locale":"fr","page":"theme:canva/service/fr","quote":"App horrible, je reçois plein de notifications en chinois sur mon téléphone,","rating":1,"review_date":"2026-07-28","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id897446215?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8c6268a14330…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.