Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Il faudrait tout de même mieux tester vos MAJ”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514013184

Proof data

Record hash (SHA-256)

fe105c6a9ab311afbadb5e4e3057e79929a376a4dd65292031bca8da1f68842a

Signature (Ed25519, base64)

EyPjhs9G2Xn7eGqEbcYPq1cm554O5E1b5pfFQegfjWnTslMC+Gft/JaJuVz8458EoL7gbyw105TuN29B04hXCQ==

Merkle root

677e672fa444dfe5152ab91687c577772e13723ca441b5c8063508daedacfe44

Merkle path

["fe10a114b6a3ecafed754c3de1d7dd9146da398703fb370af2cc5eec5971e0de","211c4a4c99787209b0bca9ce3d252401992d799e2e32ce3da560f75f6175a755","c53563b74a778e9ae36ac6ae76d4ef594a9a41ae3a3fc9999ed974341064d7fe","d70eba68198d605614cefc37bb028accc8aee13954b4dc7f1ec4e5b3b4931ae0","5e1ab5b9bcf4a36ee5c2ca975b22656a3f335f887327727da50c33fe625db307","f2f2524f08c67914d7cf9e9a505d2e711421e0abb8d01de467cc7423caa820fe","1012bde70258ab9a43c19f72150c58e6b50b7a30de2f8e940d628fd2de9de16f","630b53f7d3fce0a3c51590125937260d0d823dbda1453db6f460487b858c23ca","934ad6c6615316e81091893f266a20d0b5b2e5eeced7e24dd45413aaf0918fbe","3a1ca045e719b9845065b909abebfa26562d494a17cc4faec3f0a8035fef1300","118b716b025dc4232d96a149ea8afc6f8aea88d575416e5478200896f6645e29","9dd4e89b99569bec52957a12657064e8f629f283cd7cc3df25b3ef9a4ba730c4","5bc7e6567f0d1b99483863b82e84c2a2697639aa33aebfc220df5a066aa7a9fe"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514013184 · entry 108e9186e8c5677a6b00…

Expected log hash

a596e5a342226b61371cdf76b5c8be8e37a3d00e7ffe8f7b0b550e1a8d1459dd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787122978040","kind":"published-quote","locale":"fr","page":"brand:sunrise","quote":"Il faudrait tout de même mieux tester vos MAJ","rating":5,"review_date":"2026-07-25","source":"Apple App Store","source_url":"https://apps.apple.com/be/app/id466738063?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (677e672fa444…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.