Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Complètement nul. Ne faites pas de choses qu’on ne vous demande pas.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514341362

Proof data

Record hash (SHA-256)

ff80a0327b2235b5fb58d720e0aaa86edc0677e5cf310c87c72f7090a1a72415

Signature (Ed25519, base64)

yokDfpbRl5zU+d9aHJDzSFvRSVMQI/cz5yitAJjyFm3ryHd+P/BZCzia5pFhb8T26ALbn5yVxfsrBKI4IQ3NCg==

Merkle root

2cd516e344e4be63e12361494ae610d89d15708131c24034ae0c7b134b8bcc53

Merkle path

["ff81acdb27edc3d971504967df9c5e8bf55d36432b9010f32628aa59a288a3ed","bcb1ab58a736a27387bf29449e67cd680a638902bbe4d98323005b2db9ba7a67","10e3eda28893148f698fde36da85a4a99667888c7889c8c31ad8fc84bcdf8548","6a9b1d675525fabe4f63074052da17b5f95b6d454b0026629be4be360078e87b","6e2abc8d34e9c21743f98dff8fdc502f9bb86830e9c20588c179980fc532b039","12e69978348b0ffd6b812fd9df9625913964af2acf102891dd06225685e726c5","b842c454f74e016d41517a877ca9dad6b6d50f7631693aa58637a5e8a7088f89","1d803c0912a374d95f5acdfb325f1c801d6c3eef4c387d545ec224f9153964b6","465cd7b3700b584d30feeaafdde5b42e96cee6bb4569b5c1ae98d52dea5d1493","d40454fcdfece446f054f41548f1fd448aac182fa964cd5aa1572cf3ce540038","aa7b693b0830ee9eae981984585361b8753718ad8d2bd84330c9c33fd42f9d70","cda30523fec3f0d7bb757043316994e9f10c4260ab2c72c5da653846620fb3ea"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514341362 · entry 108e9186e8c5677a67a1…

Expected log hash

81a850cd5c32c6b6ee86a2774571659cf829f205adaa17a6b9e9a6f5bef7642d The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787126744998","kind":"published-quote","locale":"fr","page":"brand:sunrise","quote":"Complètement nul. Ne faites pas de choses qu’on ne vous demande pas.","rating":1,"review_date":"2026-07-20","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1231971182?see-all=reviews","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2cd516e344e4…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.