Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Le widget calendrier n'est que partiellement personnalisable.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2621591821

Proof data

Record hash (SHA-256)

04c181c84bacd26e888a365fb9e930ea40a465469f29074b6d35dc9b4f2cbb91

Signature (Ed25519, base64)

EMWkiBuXaci5JsSiFwKXsuA/n4w5GhqdgSiusSXFTPg2oMQsra5qz+YdOc4iXUMaN7ePd80QcSX1EF49vve4BQ==

Merkle root

80ef8d8174e5c9e41c4b3e86fd7f016ae3808fd6df1be7f458d6b538ad4a1573

Merkle path

["04c4227109cac3783d6577513e2c40b6adbb7a0f25b8249636a13f29c8ca3d75","9e57842d243c3b3f0b3ffb566a4850576bff2b31549d31a24b6d6aa1b1c6d1cf","1e6b6dd934a282dd6ff1fc26b02f266c00c1287cff9936b6cc732aaaf54a517e","5a58724eaf728ca53d46b3a44773002102e6c6f067b8c317e78b21a5b62b8743","8614290393a22cfc03b0e1e040478b33f5bb251f0b29c1b88769365225a7ea45","feb5b5c718ea79acca936789b0193c4918f8eb6f12fd2d417a881238a7a24255","e8e063d30602d1467cdbd65360611947a6fc073f387cbd86d30cad26aa7f5ee9","9cffaf2a708f6280b85cf3531a3c97357ccc20468f2631e3a597113294ca1f85","9a858fa87ec7e89177121ee0dc612b77223442e1ed633ca8c20de741542a0b1e","cdd9a46c9c43a3be8145bacb59ce6dd1c7461023946e864e78b69a74b05726c4","6352b510d22393da71e3d337860c623468166a7fbf243d6cde038475910f3643","8a65665ffc3a4722f5c5c41fdca725a257e2ab338063473af47de31540acb863","f750e38a739e49891f23aa1e661d12425441a712e16c6b53fb7b0fbc333659c4","6e65afb9564f3cc8ff91301d96b8fc4fbac4c77bfb9c9dbe43ce13006661d50d","8d9e2142445a56a1b8facbbfea379c6a3fe5da494546393de95f71ea2d5e97f9"]

Anchored

2026-08-28

Public log entry

search.sigstore.dev, log index 2621591821 · entry 108e9186e8c5677aaebc…

Expected log hash

1103461f2f136c93d3dd608a948686a2f30160cf05200779542dada269979b94 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787890464756","kind":"published-quote","locale":"fr","page":"product:proton/proton-calendar/fr","quote":"Le widget calendrier n'est que partiellement personnalisable.","rating":3,"review_date":"2026-07-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.calendar","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80ef8d8174e5…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.