Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Le widget calendrier n'est que partiellement personnalisable.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2543857133

Proof data

Record hash (SHA-256)

2523c84bfe21c2ce9604c13e0216dc7dfbb887a0fe11e26a62583970ec19474d

Signature (Ed25519, base64)

kiKmXz9jbkopfg+kRAqju7/pgpfW3OuKNcfzpUhCqdn6djFY+3ONIi1Epc8163c60SwVClMmGGmEUcoFPzWdCg==

Merkle root

cee60bb6c0816d1bc69326ea12cf0c5c00cbea13afa283147bf24b52e30f839c

Merkle path

["251f7d70bc1f2b085ff8dfd4d5ed4460bbee834026d6616b89a443969deb0a1d","b83e347f8004c72546bf22f19e271ce01320ba7174228f3edc24e9f7625a1238","b3045e70a2eadbe20e8d4d8d59850a58e7a707701039cbe66da226a8a7129583","de43ad8c811a4004dcf1a6376fc56bc7f1ed61b815cde8c2bbe169cb0a0779d8","ad3ddd9e40946c6c6bc6ca041a6c007e6b90bcb0d308d6013972a90fa31315d6","3b6d969a9c9db447b9c15476dfe57ce5a7fa321eb1c912a196b59e4b1fba1f53","1e45e51a60269b615b00ec437a4d6e2a051790ff1a6b9b5588c1812d12ed0b92","65b88e2c3c65a25940bf029637850cfd015ed0d294abbc17f2e265a48ded7679","7c9a45f94d1bc18f64d1635b1f23b50174405c17286f32dc08cbddd242eac417","44becf2d40435c6dc12a67dea44db76cd1b31ce9d27fff341b43c9d1cdd5c064","c1237d5f4603ba6ffb5b9bcc7e2298cd6e2e0f77e1969f5bf1088b9df90f4e06","9f6fe8b8ba9f3011c0e6aa1e8b55f973467b9c20f251bdedad5d16d3227cbd49","a1c11df65738ffb18228c247fd6ad5fc76428a9130a0079c6abf079e9cdfe043","806b2b46dda360b28a8a38da683f56d42f23ab9c4a7b2fa07453f271a33f5ff0","57e3801fc0af4bd2492130e334ef2d0425fdcd10c95109df38ad0d371e279fbf"]

Anchored

2026-08-21

Public log entry

search.sigstore.dev, log index 2543857133 · entry 108e9186e8c5677a5231…

Expected log hash

d8e1ac8b740526c2915424d7f7c6bce881a4ef05d0a3a3dbd88e4c760e36623e The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787288037224","kind":"published-quote","locale":"fr","page":"product:proton/proton-calendar/fr","quote":"Le widget calendrier n'est que partiellement personnalisable.","rating":3,"review_date":"2026-07-30","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=me.proton.android.calendar","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (cee60bb6c081…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.