Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“L'incompétence de ces programmeurs est vraiment sans limite.”
Google Play · 1/5 · 2026-07-21

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2671180029

Proof data

Record hash (SHA-256): 335a9a19dfca3067fce6880fec9200fed335ee62ff4835154bd1573c1ee1aa01
Signature (Ed25519, base64): Gv/dNfHqBu+vfq2nQQCLwXg7LR+PJ0/INjbXyFGfR4HDcj6xEjOsDzZA0UXTTuw3v3niah8txMeQ6WcTFTO5Cg==
Merkle root: f9a030a573da3b674a3e48c677288390a434ca97a740d63af7477bb9b0087dd5
Merkle path: ["335a62af4364131715ebd15402215796ce623ec22c8307b4469494ccbab1b75f","ac3d52d3f67c41acd4015025a9cce13d45a7fd782b955e05ac3b3f7e3caabf8f","7bfeb99e865080ae42d5aff118d2a1f6691c8f3ed423ea61ca55e3a6f6127ad8","471300598f20f4ca45f618478281d61363cf693b397dc974cb243cfb87f8c7fb","d5160686db7cdd602f38045a56dc38a712bf41d1555d3065a7885ea369a930a4","4ef00bde64ddda72b50d4ac74f94113a0b9555b27778febaedec2c03bd31fde3","8f8e8eee6a1b8e69b4604a0c69caffc3a9318d0701cd03f7468f8751fb7c5585","8106a76054f3f204239cd07f4da6484f74ef0a2a55becf4d7691b67352627751","09b0c35573847d73f864c2d7a7fc6c0fb7fd66dd72c733b277a9175563962dd2","06a02ee1ad88ceb5f6810e26d5b1f3a0c408c51ccc23aa713f24305dee81698b","188ada523c58c8c5c5a47d0c8a6e5ecad7176d570a3986d4ec6d4e0569eecc8f","a380761718bdcd8707209e07c5f70d98f3d8e526e44503deb09be257f75349dc","0379c7a238f4a741366a6fd9a03d1e5f9bb89aa148b07e3f738ac116d1c41584","123f459bb0d221b9be08e494016e3b59946d910cadbe6bacd03f308db88ffcd7","e08301f62b5ff22d13e806e4fd3e64913f665178fce99d41471461eca04be078"]
Anchored: 2026-09-01
Public log entry: search.sigstore.dev, log index 2671180029 · entry 108e9186e8c5677a15e7…
Expected log hash: 0c7ea517d47f4c8d05e0565112b0ba6c031576195cb596b9212fca396bc97897 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1788233488301","kind":"published-quote","locale":"fr","page":"brand:tresorit","quote":"L'incompétence de ces programmeurs est vraiment sans limite.","rating":1,"review_date":"2026-07-21","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.tresorit.mobile","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (f9a030a573da…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.