Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Elle vraiment super cette application”
Google Play · 5/5 · 2024-12-17

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2543857133

Proof data

Record hash (SHA-256): fa78212dd88fa8376e6750411adebf04776ba7f3513ba8a8f399b9e33a024df5
Signature (Ed25519, base64): uAS0WNh0y1y7vvDND36CDXQ+VWLbU6uH6EWV9Ef7YsNcB8ufkmqCmZUJFRJyfedWgJMIsBTA6A06XhsgdbTRCQ==
Merkle root: cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c
Merkle path: ["fa713e54a7821ec27abff19e491acb7bf0df7cd894d7e1d5096f47276b45d526","69a5e5b76062fce878cbc00f051279d267c0d03786ac5197ac30f618543b148d","a819713bb35b9dc452bb224a7d32e177e8155f1061b08e1dc7aa82271b87d775","6fcc5bd63f0f74b2b6bb715b5addd3bff53a7e0a079872242a5780a36f40e9d6","b5a94967b9d61cc171014c48eb42f510fef24dd975bdbb7000658ae96015cbf4","53c564693bfd3e6e91769d11e7a8c7bf6765c632c1470e8d18b4892cb0e43f9e","5e9f468318d8f8cd644925619e1205afc65fbbe4363957939ec3f5499690af8e","ac6da371a43503f055025c094575152b6520a03c7ef8ea2ca3be07e68a410275","e5d3675f25154ebe469fea761163e7678781c43006a1c0f44085220847f6cbdb","b282c644368424a4703a3c55f90b43564b2fe34e5ffd4cccede2673d849bf9f4","8eede5eaaaa39aa311d5d82caff567170f05a3f5da864babf80accb43c38ea8d","78caf62780a7cd32d3591546c7643819cd8e2ced71a3bdf696f7fa96ed9676b7"]
Anchored: 2026-08-21
Public log entry: search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…
Expected log hash: d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787288037224","kind":"published-quote","locale":"fr","page":"brand:tomorrowio","quote":"Elle vraiment super cette application","rating":5,"review_date":"2024-12-17","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=co.climacell.climacell","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.