Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“C’est une application que je ne vais pas garder”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
f6c948487c40a2852cf0f58bc56436b8417e77b8f273944500ee5960aeb158a5
Signature (Ed25519, base64)
7i4p9+CBfPgDKzS9AHCD7LDTieRIWLDcfj4tYxLMhlY5YPkYZeQ5bdd/9rUeb1ESBqnXwJkXwk4gaj1FHjTdDQ==
Merkle root
e61c2598d4d03770603e24740bcc427581e87bcbeea2e56dc34fd81a9f496465
Merkle path
["f6c33591df0e981969091a3922374d385b4787290b49aaa5fba6b550cd8c1e4c","c904a84533a8d5ed3acdd1eefb12f0047a1c414e0df5c8e303066d634f790377","887964f63ee40edb9b437ebeec31c591ce5ae6479896571048ce0c582a4aff80","21b6bca60ad882ce6fcfb1c663beebf93bc5efcb4c5b8ef451ea9771d6ce3189","4575787770835d6383d59df32b59b689408d4496d9087b9ed1bc7a8b58b7ca45","2fae5046cf14d2d6409c1113c0555f4f60ef2f562e9e9f1a99908a61c88394cc","204f46b1be207a2cc1533ef43ecb80f50aae806bb944978cedff6dc6ca0f425c","61f150aab3f8dcb9f34a3858d3be7c6790fabf3d10a38c1ad286d4556fe35fd2","fe90dd5d13efc3466906dd29c4af03067c40315d1e0cec33aa36d2d02f1afcbb","cb8f43350acd0bb0cd8e8ec2873983add205cc22f0cbcf407d9073876313321e","082e8033d6f7c9c0ef75c5a99a3c4f260071715bd389b7d5bef9ee76dc2e0b23","c36f0057469646e47e479714eb58be6048f8f88180c77ede26daf963913a58f2","178354b4aab4af523ebcb0558b8ed8c1db0fa0f77d72042a3c28213d8a82b6d1"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2515345787 · entry 108e9186e8c5677a749c…
Expected log hash
d9a90b5e7311041bf4315991ca7f2fbceee461daa2ae70a8b8b95323461a31cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787140356347","kind":"published-quote","locale":"fr","page":"brand:bookbeat","quote":"C’est une application que je ne vais pas garder","rating":1,"review_date":"2025-08-03","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1056652614?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e61c2598d4d0…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.