Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“il faudrait aussi quelles affichent un badges avec les mails non lu.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2582597535

Proof data

Record hash (SHA-256)

05394074e3ef14cffad4842efbe5872665ab7f94ac90f8ecddaa7aebb7495c86

Signature (Ed25519, base64)

uE+1jb7nEwBIcPSU0LVcHy0AzN/tG3UtGmLIvwnHF6NJjZPjmRLLajTfZcbAN2in5lNLfZK8Aiy8hvpIEAz8Bw==

Merkle root

568de27ef784d24fced1ff6a77db7dd17bf4275bd5784f7795efbde800264945

Merkle path

["0539b5c88721579f3f70a73afc527f36f0c1ba32e6c1052afb3fb4586dfaae4f","59747915d85fd0aad4be58274f30174176a7f1387376fbc6ec8b7e73c38e4793","a9106854beb3f98d3b1f72f564fbf9da4889932011b314889559230db7701e06","af6611c6986fd087ab77d4eba16e9c6d42bbded5965de77754e64efccc92f05d","e1bb323a4b03042bfa4811520dfeb66cd6da2e6b3daa2a2c8bbbb4bb23357dcf","e0bbf7bedc0232c0a4fed0e52dfc1418c88052f8d29f5081fe6ae2f11f5e73de","812dd721fecf37d7f5285f02aa843daf5629b2973c6cfa47908aaa60a6c053b3","52ad58ebca1d0a450a027b9b0ca648f9c0ba9679a61c787985495303577a1de2","73c2f0461d69a7e2a6febd20e3fdd127a2be817cd97163e8d524661cfff121b6","07bcda6d3a2168b8375cd7dd6d13391de44dbf752494117fa04f83b01e73eb61","901306f7c89d1458dace38a44733df0079e9f6bcd2d43da3c0160df51eac2c33","e0a30bae2c840156322dae52a02b08e3566a5cd586b033b2074977fe1c676705","b00deb9332470bdcb2bedfb8410150cfab1cc2f7a3ba959be220a4ee71e29732","3940a42145b26dbcc3a80df28cfd69a39fb071ca190610add4dbece01cccc9c7","b986cf6ce32ac8a848b3f8f187759eaad7c0ad1b455850f1924427e953c31abe"]

Anchored

2026-08-25

Public log entry

search.sigstore.dev, log index 2582597535 · entry 108e9186e8c5677a8508…

Expected log hash

20488e7687dc1a73ce99efebf3d47aaaffeefc76737db7dc492f239bf4ef26dc The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787625364142","kind":"published-quote","locale":"fr","page":"brand:infomaniak","quote":"il faudrait aussi quelles affichent un badges avec les mails non lu.","rating":3,"review_date":"2025-12-01","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.mail","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (568de27ef784…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.