Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La pire application.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543266411

Proof data

Record hash (SHA-256)

f107fca937d6e8bb2cf2bdb1b4cafaf49e29d7264ea6c49a020d6fb3a2afdc1c

Signature (Ed25519, base64)

68wAkPkUbCgdU0oI7cFbYl0PKthm5tyzshl4JcwdEAq6JujdpMKf1JBRpljZfvASA6mhKuD4fej9WC8QXEhHBA==

Merkle root

8ffad6e97d1457610bec7a891f189d1ba7dd7a92ca672c69ff1ce3283acb4b5c

Merkle path

["f1014a690ab2b349b6073b6b77fdca3b2b149dbd93f8220f1db2bc8405a0c0e8","66341f3d245d59509e2f997c382829a80ddb9144408d3434edc858966fb853d7","602df291469954f8b2d6fa60e5e62f792c05f24893b9349e4284b0d7b9d89274","05491da34b7141746246accf3e8bb1755315a9a94949c46b6deb8436d61f6352","6b4b342c75fb1597797f553b489a58cd20960cfaf08b7733b91f27facf2c8d98","8de043bba319fee2eb1a0fca9a14bd00a828e033f2585e8c6b8b0c511e17d5c1","90bc5e41ee7a9d4e96813a8b4ac7ffef0837d077e71e23c01188875de7b729a8","7066e03f2fefe94bca4e21164ec722739d81e521af254fb30a0dd158b2bf7adb","8e737ae4b9ab17838cb7b13a62c767f8fd93c61bbc9166cdaa3d2400c45c4f97","a255be7ea078c0ea57c8ed8a82f400f6982a45eb74288f64f6d0607da83323b8","592cec2aaf16a0b6536b4df7262d22b7ea67bc9d0d22e3e40df7f3423c7de4bd","68f67ed9d4f0551dc8184bf1fe317b5aaba313190329d5e3918085a89ca09c8f","103549e053ca76b1164fbc6f4cd47c3c965502ff32950200621ab55e4e061dfe","7c94ff27d324cfeabd6b92fbe8fbca077bdf14d29975169a3a05e610d1bed13b"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543266411 · entry 108e9186e8c5677a241f…

Expected log hash

443ef8f29d5167ebb4c56a46778facd07b7651afa8db2d089c14a991ce0d04db The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787284817344","kind":"published-quote","locale":"fr","page":"brand:storytel","quote":"La pire application.","rating":1,"review_date":"2025-09-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=grit.storytel.app","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8ffad6e97d14…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.