Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Oui ça fonctionnait bien”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
24e982913bf3761f2eaa2600d0f5931ccdc5b66ce3c256265cb5c69fb7278efd
Signature (Ed25519, base64)
Rxb8OjIFvBiZ9Ugre/BYFk6AFenZO97M9Kgpfgmzuzmb0Wabp6JUGogfRS8vXno1w7YiVxHVxpVkbxGaiRQNAA==
Merkle root
c954f278b03f0ddfeb806da3192a945ea74ae5ace31cdf4f5c03d62f9b9c9c85
Merkle path
["24e9b44631863b8346d88d45303da8ae8dc2b1ea9e771b2e387d92a1cf02c155","492bb99f39109a83a6c406cd51bd348108b6a90cb1de783e64cccd6b5ef3cdcc","b854fd60b1a7b7e325044a64d8a4010f7dec574e8cec5a6c5c3bd26db76e73df","8416c66a866a47181d4572fc58d5a90989bd76dd6086ae646a5aff80e0957548","302d3273ed5d68add6aa526a84ab0a96bc564fd89d409a2319bc9f0f208858f4","d1dc4c5d4e5208f929e5ebf391778ce21d4fca0689ebe4652c9ef6abde60abb7","2f0ac21e46c78b33270c685fab41102160fc06b41afaa369dc4d60ed855f64cd","f126b8aa24dd5c887c6abb2fed4c283e3c496a15066a533e148dc6fff3d44c52","e3aa7dd51f14d396c433cf0e1ac0dca5492d955057b01b127972f7b8a14b07e9","912020d890aa14e7ccb30f294dad0282f9444041f3c33961766cfa2a3b88e5e7","ab5a20a574935b67f999127656d1163bbc2d3c8f55ce1fa0401c81fbf47fe51d","27c1736d84dcb857628b32ae14fc3df4da0574608b0371acbef704d25b779fe7","cb9c27e685a1a40adcce5aaa0d4ab0bc7c89b1edd82b7ac213f34036ca479ef6","47f7935efde5c1916b9700110a56050667a486da6d01efbf1be7671f42769e58","2d9d4b958999e2b40d6b124a0a8044720e0313c217d237832e6b1171798873d8"]
Anchored
2026-10-05
Public log entry
search.sigstore.dev, log index 3084008230 · entry 108e9186e8c5677aea31…
Expected log hash
6a8c2df90f09571413991731949dc32a09a60f9a75e1342827498da2cbeccca4 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1791183579482","kind":"published-quote","locale":"fr","page":"brand:twint","quote":"Oui ça fonctionnait bien","rating":1,"review_date":"2026-09-28","source":"Apple App Store","source_url":"https://apps.apple.com/ch/app/id1225135057?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (c954f278b03f…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.