Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“une vraie version gratuite comme ÇA VA est largement meilleure”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2513934798

Proof data

Record hash (SHA-256)

ffcefd09bea322b5caffcfe2440fe9ae7c0e591742e9e10f3669f4e693f24c3b

Signature (Ed25519, base64)

9Vj61Vu6DMh9xJ7oZG+J3RquCA12mxP/TNbxzFkENAZl7EvkzhR49QNLqld2QOsQqICUNzdzZiwy4CnQjFwaBg==

Merkle root

0148d24ff6e9c2ab4d5b200cf436fcaf811faf144951e67c277e5df63df916ac

Merkle path

["ffcf6210b54ec09f1eb844f1175c1b693d9ea7259bcfc8103ed960c7a42d6a6b","7959991306491222b0801f09de9a1b0325bf137b7be8223328321c9348550007","09c296c3388d09a53f1a28de98fc4c43d952ffc735885a5ac3f7f733c847e914","5a0b4da29f650b5f93b91ab91464e67a687ac40287fc51e6b49a83137f9005cc","60fa88682dbeb1e7c4e5ed3b80ba5bd240bc841a65cd8b42195ab2ad0e06fd03","4ee97deb4b83b29886da188c5b5123e88b9beb6c76a83401e7543f143e46e8dd","95780e78683220fbf886fbbb2da16b1981d9d58c153b616a62143ecc66381db5","2965caafec473553d863a1d9d16521cead726e55854c3847e1124e0afb47db53","4d176cf158de8f5a487a416b919eb0546eab0afc3a202fd2e1810328731c4e90","592a58b5922ce02accea2ac2972c6a09ded44247063628a784a2e2b8f673d019","42678403613f22f6fa71f15c7dfaccf97b632891788fd8406555c3756fa22361"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2513934798 · entry 108e9186e8c5677abbfa…

Expected log hash

4398d73a28baccf419c99b11cbeb8ef2e4242701bb0cc17960e1b5f329faf480 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787122088277","kind":"published-quote","locale":"fr","page":"product:acrobat/sign-pdf/fr","quote":"une vraie version gratuite comme ÇA VA est largement meilleure","rating":1,"review_date":"2026-07-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.adobe.reader","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (0148d24ff6e9…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.