Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“L'application fonctionne”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
a74b0d9e5714708955ef7c2879a329cbb6d9b3eb1218d2ee48e4471a51a491db
Signature (Ed25519, base64)
/ezImmU7+Y6cGY8ePNEM/u9fHW0PYVVFm4Igd+GDxMUWyroW+p/q5BAF/Mk6A5IlQoJo/LQ3V9PD+W8uXY43Cg==
Merkle root
4900b1080bdcd3b4c9234f01647614e7004e0a1ae01ead44968e31abeab33265
Merkle path
["a74f0e68c155c97ac7b6d16c04fb6a4cf4219344ffc119a65d73ba4a19158545","24efcd4f74dd228803204653ba112d242ae6d8090cf992c568eb751c4f76b4c6","b003fcad8a4b340fc4d9defbe9f73bc94b8db4ff7cbdfadf79fc8264b8d07f44","3d106e659f893b586d74a30afed4c7a01261b5c8d19d63eb9b846957f594c748","ac8c9c4bfb68506478506bc02d89dede35946c3dda0368026eaf34ef40f9edc2","a33d0f31c8c733b51ddaa79b2535be78866a334dfcecfa58fb26d0144f9575da","916a3b936490f7132a2b58c8a74f878cdb7644058415cb9cfeb47526088d7826","121c36e662c0c2b364c8cb5e539730b491c31d2a55be4486cc6c29aeb56b3d6a","7b25aebb7c94b5d4c808738863b5cb0dd97d37c1709d9c6a84414132a36ea576","934b04f2a6320586404b66d7a04bf2e00ee2a035c06c9a3930d849478e6a593d","d7400f2efe58892a1c33499bd80d94d48bbf91945b0edc3044a57a7be4cc0ee8","997c35181cc87d08c651fc994a2fc0e89f6befc82bc348f58aca9a735daed323","fcde407cd823adf65f7404afd4b1ba5062d4dc9b443a0ef9b9102b09f040f91d","0a4842003c61f69c5923b6aafd56426e7fe934e483f7d15b620c07fa61f89152"]
Anchored
2026-10-13
Public log entry
search.sigstore.dev, log index 3241341297 · entry 108e9186e8c5677a0e53…
Expected log hash
39342fbb95f8cce5be4111719e5450984494edcdff99b8bd9a5c0d2303b67943 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791866192176","kind":"published-quote","locale":"fr","page":"brand:concordia","quote":"L'application fonctionne","rating":4,"review_date":"2026-04-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.concordia.myconcordia","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (4900b1080bdc…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.