Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Chaque dépôt doit être annoncé.”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
205b4a33986adde1fa964e3b2b7a8e3dfea6a4491f7f59c01ec0625f4d09a63c
Signature (Ed25519, base64)
5k5F/pAi00OXRpempnSMIY6SXDgCEYmbJ/iVcs1cpwQC7AXxWcpuLHS/j9gGtS0dUtWha2sEogEALCoADrLaDg==
Merkle root
1dd7fec10002d9304505761bfad9c0f048c94d1d6a0775b6fc4291f712d4106b
Merkle path
["2057bdb6cc4081a8fa6adab4c0d689504dc39060164bbc95270aa851624cb918","db7ca1e6a37d2a1e5d67f29156157b74816ba800a42936e402a45f6e6664e336","18f5c71bd4e301035a1513eaf5fd7523c9c13cabd32b1e3ddf9699a6fce085b0","1a977c576e925f39f7f0fa2020adaa904f26595e7e09ecf0ca48542da70de720","cafac4ecd748bbe8143f5805a4a0c10bd3d72b5ee60351273f1e7d86c27fa97a","993333095fea0147e14740b90358d7e67d20288c037c58f269e702cce6971385","e87ed88bc521984e05c89e2ef47ebd0bdb6ef504eddbfd3599acff3ff51e6565","daf2fa68c4fc57e39c2de5e4c2f4dc4d845cbff5722e4d83c4a73a48e78c73fb","3c66919afab2552c78f4f727a83264ab431badbb87d5c89cd6e9730ae0beedb0","d6d6efead31fdfe2c0a2e11bcfd11c71c6bc83041a974375169b3dcb2e78f35f","34a547617126a2be29454b3a340d345b20d1b66cf545e8161b68c19858dac5eb","98438ed119190bf5694defbff6a1b322c9742356112668a6bf5fcba714c46914","1e0f2b6cff090cfdd5d25ead7f46fcfc2672d59cdc86bdf2b9755ea459d71ff0","96733967bd879589a2091176049a40f13c26bf93f656924a17f15f3f405bad21","54bbc2d7930ffae8e416e662d825fe408002ca5c9c581c2388ff0eb5a37134ae"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514297706 · entry 108e9186e8c5677ab801…
Expected log hash
861cb9c1424d2f408888a591a8305206c340f8249f4a4581b32f940ce8815405 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787126020727","kind":"published-quote","locale":"fr","page":"theme:relai/ordering/fr","quote":"Chaque dépôt doit être annoncé.","rating":1,"review_date":"2026-06-04","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (1dd7fec10002…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.