Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“La dernière version bug pour les pièces jointes!”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
0743cd4009b0896bc4a17827072c59180917de203a0a201e59dfd9ccd0780a7a
Signature (Ed25519, base64)
zcdVGwKsguVLxzX9UKskOidwJx5MpeV+tFRVDFc/piv/zfxOosXtxxr87nMpDc97vIvF4VtRwpDRfoKhCNr7DQ==
Merkle root
e6ac019704b226508e994cc0855a4d192d5ca56f36bf79e20dc9e3368a99cf1c
Merkle path
["07441e3acbd195979a844219b6e219daa46c6ccacead5b3c58b0e684ab04f389","b9ec048ce599bfec24d0bce2dc1e5c90e911a1c7d073214a321a8fe988930344","5c1b9b6ab0645836750222f7e52046cb79269692b9383894c8a01b8de4615109","ccea1eaae6e8bb08b8b9267724159d4a3f212c631f96752aedf07cb94bbde24f","dde133e6efee4957cc8647c63bf7722d394003d0884a1c094cdcf22efaff18e8","a6fb0fe8f9b90d5b08866650f105ba713b8ba84bff242eb832e254ec414d7648","fa28adb7e455b0eb5ae6c6334034b1840059bdcb536e159da77a564a03812252","3bc6749aa2ba59e74f0fc03637e12eb077690c05f08c6a28eb02c1a4e4d4934f","95b5fc886adf76b72ac5e081f98d2e47ec9617eb82f031ebc98fbd98c57c8882","6651c9cffae29657c2783a52ad745af90d49949609c2047204d49c67f0076cfc","e6cc2e980815e5085e45d94597d214cb8a671eee8f8d8bc713278ad1394457d0","76aa14c6b140f882f5a6ca82e1bd3d30ada81e6f9ebf68b6cb689ed74e97d2de","af32e6ce7a9c3f92995c628e9a34041f7ca98856143c57e4fbb6f9b1d2e86f88","300daef4aa548e8c10fcf4706d8cd6c134a74d44a2fedd09c528770268883f87","55037d90ebc6f8ee5750b678c0269386792b0a1b293edb3e029a7c8e378291ff"]
Anchored
2026-08-29
Public log entry
search.sigstore.dev, log index 2631716425 · entry 108e9186e8c5677a0f4e…
Expected log hash
45ebfa784ea01d364c463997b417af34e35327c4187ff9e9782aece8c325deea The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787968874252","kind":"published-quote","locale":"fr","page":"theme:infomaniak/quality/fr","quote":"La dernière version bug pour les pièces jointes!","rating":2,"review_date":"2026-08-11","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1622596573?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (e6ac019704b2…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.