Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“je veux bien payer si je depend pas de l'app”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2544092674

Proof data

Record hash (SHA-256)

9d5286fe586aaf2f79ef538c568a685d7c12ec3e887c85aea3ea34e375dc1949

Signature (Ed25519, base64)

PyTiQ2VKJAasx/txxoj8ybvtkc63h296eHOiVpynINdv/Y+cP27zR082tcy1vAOKBtSlzd5pqf1j2qdCqM0/CQ==

Merkle root

fc0474f2ab9253f8c52a81a0b2f1ae382f5f022f9b54f4e3fe06eadaf19fcf31

Merkle path

["9d53f751139e59aeafb32c402794e3529343863a74b138057e4cef5977b14bc3","fbd9d38bf86943c64211ff46a6435932fd4c343ed3aa2c275e5cae87a491ad65","d3d1e61012f3eede6d881728d445df5edc8e483968567758d6d89f76a4f01330","1cce3830792dabeb76aaf1d8aa1e4182c43dcf9df82eade78417c9dd2cfb7df5","607f243252de6bf590d8ed56ddbd37b0e9415eac9cc8e70c1b2e1dd3b7c6e9c7","eaa36e0f6de364485da51fb25300251c346c4724c6450ce85e364899c87952c9","f3a400ab6d26eaa097822e11a751394735caf3bc03a0857dd8f8475fce1c1400","59f3057b35a246dee0408595a1dc58886aa7c72672a46e147a45ff7215094030","0044c5b3b365fe3f1c3fcc2ca62375614531196a11c1ed23c695976281372c8a","52d1267ca96bc086c241870da129f00a1d54db0c9cacc35d62ae11963b2676bc","0912821dfd86de47e5b9c0db3cb62f2bc1a72349a93387e4be06d09dfa033b0f","cb2b4f59994725cf02a63867bfc02fe1256e514638d04d0be65ba55ba1cd6e2f","61e99b6dc1806028f6bc5e945f2081b1c4bd175ad3b4e48d4edaab9b636e85db","5e3e14a1ecafa84280522a5086c1c4eb7da1d2c5613bfc63f3fbb10c0768d98b","df2c1289894581f6e22c526afc719be15b70c61ef4fbef0978dff78cc8fc6054"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2544092674 · entry 108e9186e8c5677a1b30…

Expected log hash

e3ca1014bd6a1a766a29da72cd2b9f7f9c6c416fe6af720fafa94eca555dc171 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787289954326","kind":"published-quote","locale":"fr","page":"theme:storytel/ordering/fr","quote":"je veux bien payer si je depend pas de l'app","rating":1,"review_date":"2026-05-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=grit.storytel.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (fc0474f2ab92…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.