Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“on ne peut pas écrire le code pour valider notre inscription”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
98adad622116e3ddd91777f1550e52415d57982c0521f7b654773f831a834ae9
Signature (Ed25519, base64)
luJNYpSxC3lL8Cnlb/3moCGQC2NTbkGyldnFC2QtLYvBLWUpK8WQlrUdbOZ6n6I/ReLfegJBYS/eeSVqWpgBCA==
Merkle root
d414e521fef9d6d099989fa0d693684c20b42a89a12033fe1adae5ceadc28160
Merkle path
["98b5f4ff672df136a2520526185649702f133b0434341b85e0293ac5afba259a","85e8f0631a998c767d0a6845ab144a3d714df66e6c915d2fc4d1af0858edc0af","5319595d85498df8b688e53b91baf48f9d1179823bf75c29ea08ea2902a032f3","492c14f6c448887eef3db831a735988cdb7a5de753c03d8b22bd376e4586fd32","392cfc369f31c1da256da66e1fe7f5420e027f845989ca9e8c8912845f2307d5","3363d506b2f07a51cbe586e27983673b3b0f277fe6f1085c2bcc1bc33737a81f","134c416e9cdc90f93b733a7cf62a2a3747572df10a6b7c2ed8da69da9ef2b09d","8a47f90a5d9b643429fef0cde98472e1c181c264bb4c8906cc4d8585357864e3","0ee6b17d93f442d0c190da6694b237c460f2fb0178fdcd51d17ad4450f9bcff6","ec4dd00cdce33bfe65e6adefd5c1820610a79b17f3044e6fac461c0b95908dcc","5dde2d3c841f5e076874e6422102d1df5420b642d4ba431ca47d9fcb8d47ffc6","fc68b8997058037cbb4d83a1f654788e24dda23dc6270682cca4933c08c9228b","5dad2feacc332591659ef5f707e7370faec886ac17be964db5bc79d75687dd8e","d7a7c2a32134d938fc38aec7bc1cd9d31a51f8c55679fe9114fee3446c15cbb3","d9bed3bb20fbc734967be09c1cd24ec9d5bb72fd1e4fdf84e6057ce858f8bc78"]
Anchored
2026-08-26
Public log entry
search.sigstore.dev, log index 2594412582 · entry 108e9186e8c5677aea33…
Expected log hash
b1897d255cf944fc063c3044a4546ab02c40327197d891ce843dc1c45c2dff03 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787713855428","kind":"published-quote","locale":"fr","page":"brand:fliphtml5","quote":"on ne peut pas écrire le code pour valider notre inscription","rating":1,"review_date":"2025-10-14","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1071744833?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (d414e521fef9…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.