Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Toujours pas le crédit Agricole”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
33a678f87de93cb21179b830d2144f87c0de6f38d343087a5e1d150953189779
Signature (Ed25519, base64)
VXRrg56txup3G03jnERNJ5JlelimxBmMbVbejvMXBfwcuVCRFDezLUADqeu6zpqFgiG2SXRdKYyAtrCZVz0DCQ==
Merkle root
596f968cccc56e8e000b63b9dd30489d92d97de49657c3c152b38018ff4fca5c
Merkle path
["33a79ed69d2aa34f77e563f6c61d629894c53f7241139a406ccc2e6abcdd13c5","bf5d281df5bf04def3e01d3605fe1c5f8e70dbeb62db9c80d26e43a781237979","26d8ed8f017fd4a7a99f2fb4356bdf3e398755364dfdca4ccdcaf92a4e9f10df","63a9036e58188ae589d6596afc46a3a4c69c54ab9eb0a3c98dba8a91d720391f","ba6e5d6cc7d2048839c9c2865ec479e3c912482a03eacc21c06ed1ff583e335d","b0a75e4322cd59cf158dcb18677c2fa2a2cb3e76d7b3d5396ffb4bbac66113b1","bcd190e628faddb3a509a99606d28698d33a7ac9f91ef4872c59ce257c3a9594","1282e76d0ab29b149b7b6e73f61422c0a6c5338c7d1e51cea1c2aaf6d20109d0","277e6ef28b58789e22729be4010f29e90382df165dda2d97eb6dba15008c5ede","fb4de801256a69e6912dae17863305eafc968570a6cc8cd76eb62dfc82e1533e","3f87a57ff95804afff8bdf75653f6941ba3b63d5ae97d383f955e6e55c1cd69c","549c29654c8ccb6685c4aa0194ee8baf75caaf3c515d5df2632799e6b2cb2d82","0f89c2f7791258baba64327de630f796bc9519f35a2ee004300933d25ceddf50","f34a99bc2eb0f4358a151b675878bdf5ad21628e2f02e9070ad22d026160a11f","1def65a8c7022796c92bf89e3ba0ded5702ff898262447be3bcca696fe961465"]
Anchored
2026-09-02
Public log entry
search.sigstore.dev, log index 2682369737 · entry 108e9186e8c5677a1ae2…
Expected log hash
21add9acab3ef5374d6a20f71e18493c941f530ac81d350c83b699eab93536cd The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1788315101182","kind":"published-quote","locale":"fr","page":"brand:swatch","quote":"Toujours pas le crédit Agricole","rating":1,"review_date":"2026-04-26","source":"Apple App Store","source_url":"https://apps.apple.com/fr/app/id1525248439?see-all=reviews","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (596f968cccc5…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.