Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Aucune mise a jours”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
03bd7c4f6f3036489a73e5d55a3059a62e5c64f760b1ed1cbadf9ea557ab7856
Signature (Ed25519, base64)
sfox3GvxJE6X0cNQLuaDiIVphX0nVt9fbod9D+z9sRRWkJTZBto/dRjtV+vomMj1zlcT8y5tNjz5DzT4RZWNBg==
Merkle root
c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path
["03bcca390860dd0504dae16fb74d4381abf9197ffc508cfdc92df9c9c7ed222f","5973ec9825f2ab0d40a195f75143b3927c2002b125b9c7a35c09611415e58516","3869a26b52489b3ff69ea5aac362734042b1a83b59bdaeeaa5cc3273d8be669d","45d6a4f3939bfa6ac83630722803ba00edd1b2fcae5c63dd20c35291813ecc40","e1216fe3415c8e14c27cf72a9fcf4963c952fd17162420463113310428079bb8","1f3f5a270201c2576d4eea4741dd3e75657487ff942fd2fd1ad8b410e738ecef","8c6e789bedc7153bda4fd86d545991d4a42376960beaebd689eed25ac9e81615","1cb09da8fee77dcee2e2cf60b45cb9cbc3facaaa4b4bca337870c454766cdf11","666ebbdc077bec7b22b10dac759a6f84e3e3765fcf77f6e5b071e70f32ccb430","008f500b759bc999e69f516b120edb6c515c56a2fb8b5ab9e935163aab6270da","33ff3275515316fce6acc60ef68f467849782094a9c0785aa2e36d411dbb06c3","c7125ae20103191bb1f7fb84409a144584e4eda9b031cfaf345a6286230c5535","1d0fbbdf6a8b806d2f18b88d9ff84b283191f14c9ba960ee1b7e6a525125a681","47f7935efde5c1916b9700110a56050667a486da6d01efbf1be7671f42769e58","2d9d4b958999e2b40d6b124a0a8044720e0313c217d237832e6b1171798873d8"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash
6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791183579482","kind":"published-quote","locale":"fr","page":"brand:proton","quote":"Aucune mise a jours","rating":4,"review_date":"2026-09-02","source":"Apple App Store","source_url":"https://apps.apple.com/ca/app/id1437005085?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.