Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“sinon pour le reste c'est une application très utile”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543154575

Proof data

Record hash (SHA-256)

f9ef5d6444b797dff45c625371535c849c54903503a2c4acaf79b80e7e6f2c80

Signature (Ed25519, base64)

Q4QZb+NAhvgG5/fihPK/sEQbHc0POjX1WvMuGyUQ7tIqj479jX5sm7C9f/YZrcK0pcKBGxPQUkJ/Ub8JI7+XDw==

Merkle root

9ca8f1c1ad15a78206ceaec922c537c0b0ac598e12c9c25877f5e0e19de38c6e

Merkle path

["f9ef25a9e972f137f175dd940df28384c959f7654367b1f5bc40f606724488b7","f3789ff9affadd0b8043bb168e77755dfda6036c9c3855b81d606db0da04f2a2","885303e7c252372db15b0b7ca0d7083325fe65cdc3ca8ed0cfe99ad78e8b720d","26c37e333b5701084097d17b762792f257479147edbc9584a986a313a395f393","6e69b39504df44548e65e0f9776bfddb0dc93115d45c7cf218e828fed0f6987e","bdf509e5f579bebf52b3fb25325479a6e7e3d6b05a57c0b84dd267cab6615e1a","5d83cf4dc3ef94600bf9ee17e015d2a7c0be1ea5870957d24d3d7b1e90f29808","ad1e1c0a527972331c780774bfdb07f78c4491877cc1a94be1af634495da1855","d348eef1e59a4c62e21cdaaca44d83e583aabe649afd55ff54c4859d179e3a6c","95a03497af373579d9204fc8204f296be508a31ed11f468577ae744069de0a99","0de9458eef5c5fd72bd101e9230b8be27409babd0b4cda862df667f0aec8c53b","0a576056ee16c853973c1ae5f2e69eb8307a6c11579960d3bc89f852486ab500"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543154575 · entry 108e9186e8c5677a0eab…

Expected log hash

0099eed9d12aa99aaa44ed875b87ffaf90c46527b61dfd92cdd4db2c148aef65 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787284115102","kind":"published-quote","locale":"fr","page":"brand:signeasy","quote":"sinon pour le reste c'est une application très utile","rating":3,"review_date":"2026-03-05","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.glykka.easysign","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (9ca8f1c1ad15…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.