Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“les données de l'application occupent 68 Go sur mon smartphone”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514541190

Proof data

Record hash (SHA-256)

fe7d232f609fef6b7311893d9dd780b05416917290e70830cb4bac761e0993f0

Signature (Ed25519, base64)

04JDFGdL/eqbnsqOExWYOfp0wAUgVq6YEC7ZVrML4RAP3CmMz7+rIZ5yQFfJsf7ugfWIoeFyMR0mQtBe7PQFCA==

Merkle root

6ddadcc7cc1bb0679f63a30d8a28a2a72e039950945f2d7276487dd5b703ff7b

Merkle path

["fe82f66f746c8bc1fd99c4624d2b936bfae608876fdebcad43ea81788e822932","2220843779761269a45fa5b4de5e2e02de10aacda46488889d93fa348da4fb63","9b55f3f0c798fd154c4303fdab46ed8168d62c14d945d491420298b478704408","3376bb94ce0becd947ddf3c3697ba5dd4a1049236ee9f989ad4a2872efe63e26","94f50a846d752f59e0d185a04d532366d8c46ad58c063f7224215a5f4b8392b0","364b72b34a00d297daec8ba97239e0d456e71a23fbd9386c668f942e96457e0a","482e6405dedceb80f51cd41f3c5c77e32746bf9a2f221f4101277059b0b2493f","7bc23c7c984795d8ec106469afd2695635f045fa7f925435e06c4443276f5d07","c720ba5f7d896de08c6c653f034df6253d73438a17eaa4da90a15067a6060afc","366be40f9a826a1f9f414f5bd1dc69b8a5e86031f347bbb2fed9c67e1427e4de","b40ab33f2e52ed4a90d4b252b515f92c935ced18ec43a91b524f940a12678caa","1d83f6615db385673b65f8ebddbdf4ced98d2ea1acc79049e3086b75a832a99c"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514541190 · entry 108e9186e8c5677acb65…

Expected log hash

adca5adcd6d3235cf084bc9b408d3e4d7742d07347957346ff2629f37429bf20 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787130614827","kind":"published-quote","locale":"fr","page":"brand:foxit","quote":"les données de l'application occupent 68 Go sur mon smartphone","rating":4,"review_date":"2026-06-24","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.foxit.mobile.pdf.lite","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (6ddadcc7cc1b…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.