Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“À quoi bon avoir une application ?”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
e89fc10414e8d688550f858621d920cea85ae432da4cf10e24c654845b508a54
Signature (Ed25519, base64)
tshvzWbQYjwsFhTT2q02XGBT+HZoFyDHxgkP/ajLWTtkBf21PZeaHND/G5w6Aiu6XyabTUdx5PX2nW2ZBtSEBw==
Merkle root
bdf558524b6fc08556728f259e0f09161d4626349b700d7f30fb50b05a626ea1
Merkle path
["e89be313a99b405c4b7cedb166c1c3c197ede06a5abdff8942e6245bbe4c9e8b","c834b0b0f24fb7dc2d1d5e47f7b5f02760c75ab4c4898c506daac022598df50d","356250848669d1f59c84e9ff3ae326247d3e2dc75bb5391fcd731f2ef38757b3","61d4a494ac663340ad030d9e82b1c33bda3e3b9f6a2d84918efd25d5a3b69043","78acb58fa0ec6cd41642b5ada376f8dd6fbc876b5d941f431c018d209bbf381d","c4ef9a29abaf0ea46115cd11a60c6ae50cf901f05fb7e92cfe76524d04717c0f","f8d4e2d12c790c6aedb8844738eb23bfebcf66715bb7c7e11c1511615b7febc3","c07043d932eaebc3f38419863da56e9b645bb1cd28966e2091757a5ec826744c","b6898edc001817caf3414292b11b96ed1ca835ee53bc0257d32ca9af6d0f9e67","69614a97e439e222c314ef2666b7304cfa565232cde098262cb4c2e882f2309b","ccb1acfbb92a3da9f01a00252b96bd4c51eb51b971386612e0064a87c85510a5","4d7cceb39e09f5e18fa14ed3fe616a15de42c89bc4b8f7774c3490357e8add1f","a840ebef7b833170b3fad145e54a5f4b4d72d963a8c59680542dcbab77bf262c","3d0742974b3f0c289e1fb2ae2167e507c87fd383a87d770f58fd281587e12662"]
Anchored
2026-08-20
Public log entry
search.sigstore.dev, log index 2525257308 · entry 108e9186e8c5677ae552…
Expected log hash
c7cb1a1a9418331323cc64d3f101e644ce5e79412d6e55a22a9342e33025b7dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787195935480","kind":"published-quote","locale":"fr","page":"brand:pandadoc","quote":"À quoi bon avoir une application ?","rating":2,"review_date":"2026-07-29","source":"Apple App Store","source_url":"https://apps.apple.com/us/app/id1210645479?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (bdf558524b6f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.