Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Manifestement mon téléphone n'est pas adapté.”
Google Play · 1/5 · 2026-05-13

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2495053720

Proof data

Record hash (SHA-256): ede9447210e74a069301420f0c93ac0a7ced31bd05a0d21113a6748498d95772
Signature (Ed25519, base64): 3C2fgA0cUgwhdxpESTJwAm/BvA4NrgiCrLQ8fpGxexIFwLeIbRIovWg/YSRrDrvZ0axZkCp5IvVjzz6no6VSDw==
Merkle root: 2a2a7512f4cd1b2d7f9a14c5eab7134b14600f50da8f4370f00e3d07bc999793
Merkle path: ["ede43047f772a196134f3a761d87c8baa762d35a8d03ef201f80185dace76b3b","7bc745bd5fbf79497248e054d01326d9784f55a1f54ac329ae9ac3d36c8083b1","d031e599bdd0955540ec9209c37fe52099f07bac8907342e0cb514fb058d56ca","4df404d6082dfe155174d7bb0a66e0b3b0dc2e1b8feac2984bd82e7dac2eb509","b1483ee172047d754695ea8d2be2d2c5fafff044af9dc0a535a79701bb813854","a0c44af8410a1ab1f894b713cfc7aed36d5fee757a9b49d3235f3ee7f2e3cb3b","9fb821979f71625506a6d01cbee3e721346f02e124c72d09b5a44087de58a853","c7f5e64c0b779056018f82ba7879c198ca1af2b8fb5ddcc3ba3e0b81c369e372","62c53054494bda08b3931a5577dd895096dc3e45e93bbc7dd41f8ad4611ff0f1","5ba43e8c902f6ad7b8cd39f4b2e0a23d7bc41bfd0bf1ed30c7b8dc5c6b4ac865","0ee4981d8de77ef72ed3e5efea563541eaa556a41fb8751434f71acdad4ef640","135a4fe052e8217cb7eedb141f160d6977b325c5cdeee7f373ab5968b19e2488","d54936856f15e6a6e1afa3aa02c260c3763ed7c16679b8128fb17c9c6060eaf5"]
Anchored: 2026-08-17
Public log entry: search.sigstore.dev, log index 2495053720 · entry 108e9186e8c5677aab36…
Expected log hash: ed6074196ec9b1cfadaf17693ba1200791d122c6ee9d44d772fe27e3b176290a The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1786933230052","kind":"published-quote","locale":"fr","page":"brand:worldline","quote":"Manifestement mon téléphone n'est pas adapté.","rating":1,"review_date":"2026-05-13","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=eu.softpos.softposwrapper.wl","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2a2a7512f4cd…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.