Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Pas si chère que cela si on veut garder notre vie privée”
Google Play · 5/5 · 2026-06-18

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2515144749

Proof data

Record hash (SHA-256): ff149b97d64ffc0d55c2c31288e2a861e48ee900efdb79b5f71370dd4cb39349
Signature (Ed25519, base64): GBWhougP9CtHS8G3aiMU3dvsLI1+MKTs4p89BLU3vLdtuEeVf3q251qoPyC3jf+2HsZbAhQQ4dM5wM/vGk+aBQ==
Merkle root: 8a6ad893af0f0bb6c448016a777af61f3f4935afd82df0db132e64f813535715
Merkle path: ["ff1694d55dbfa2aa7860716e30f002453767edd001e5d4a5122a3fdd1fde0016","dfe3074939da26e28f465367a3587ffbf1539e7bd2553e45e00efe01bb1ac98c","62c2ee209835de04978f57054517b67cac6d622cca824e9be77b45f95f1adc58","90c4ad7849974140dc1535773953342c411f2cb38a5dc4fcc83d205925914ad5","46080e118e55f5f9852eca07202e8ec3dcb3571a6e90a345e38ab6b438a5d7b6","de7e3524eeb358a5bd05f8fd6f4970995c269b0063972a445877bedf7878b201","f4d0207fc4fd3b6e0a17f8966219a662549c72734b5070bac14b5ed12d0e5113","d143ec1294b9d9fb5530f903cb5e93d69b3509c2eb0a53c6051976924331f6c3","b7e2ffd7cc3751040d6333db1d59798bc6858d8e51d673c786b5113b7cb010fa","e935a047d05ae025b873abd86951bd3a367a901bd3cb04fcce7237ba3fa9b9b9","5bc1168c47f5724c35ec8610ad8e7047dceb7d2dc8be9a835d1c344ea14431e5","aca625c2c743c13b7e188c90a8dcb2895afae601815729b8511e9bcc31ba8968"]
Anchored: 2026-08-19
Public log entry: search.sigstore.dev, log index 2515144749 · entry 108e9186e8c5677a63b7…
Expected log hash: b6b79ad662332330e69c4ef135f6fb13ddc70048f846024d496aaa533f7f7fc0 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787137589246","kind":"published-quote","locale":"fr","page":"brand:threema","quote":"Pas si chère que cela si on veut garder notre vie privée","rating":5,"review_date":"2026-06-18","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.threema.app","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (8a6ad893af0f…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.