Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“confidentialité RGPD assuré”
Google Play · 5/5 · 2026-07-31

Checks (re-run on this request)

✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
✓ Public transparency log — Sigstore Rekor log index 2524617489

Proof data

Record hash (SHA-256): 33a7a3ca1f8d086caa87c25c6e6ddf76f815cedd538fa5f002b754af2c0a7f2b
Signature (Ed25519, base64): E4rDUgMyj4d751qoKFnZX+gLsk0K9QC1v9gO70m18amdaPU4RTDj/H0M8RVNdLMeL094CoLwD5WbsEBkmgqyAA==
Merkle root: 5c4849a28e8624d6f6d3204e1f81a6b24f2188b6690e8b122801054617ca25d8
Merkle path: ["33b41abbd24536e8807eaaeecbfb853d54db0f33eed4f035c7ea7867e645f894","26576910cc955058fdba19cc10e387543457e1c35748bfa983dd4a9530e39121","43c68f4dfab29446d2926fb1d0a637e93032bf38096995af921120b1f1a90469","112dd15ba329d143dd86f7e2d5d81fc14d49f0c2091e5a8ac9d7e18e09fa4899","fd34d6b76d29a2eb30c2ec13cb70bc36c8a236c49949c3becc32578349f4760c","b3a0e7f24838e919865bcea0386df1640f579afa25ae35f8284056f9a246908f","b940799b576bd33d0555d0daa57a772b7f230d445750d1b200dba9c893038931","bbf093b9267cd7173c8260eab3f2a9490b9d422c5a94fdac7f27d08c486b5bb9","455eb0e9ba93a28dd653c89d4cf37bb56dff77bd51e960edb02024be26cb65d1","b2b27078065157fa8ad24c94d2c1c175745cdc515e04ea56e306b819005503e8","2d39e231bb1e282c1b07b320602659b1867f35385edf99e5ee29d091df70da73","9d2e5b97810f7cb6aecc46f6ddade4f35ec5ee034d5538377aeac8eb4507a8f4","45616304fbb070f744d098367d3db0bfb10c29fad886560a2ad4fe003bd3cc4a","9693116cb745ecfbff942949993950a2efc72f3f48b394aa6516ac43c745a9a2","649f189ed3a422a3ffceae7f7673f3e683a1fac940fd27a4d89bce585dd48e49"]
Anchored: 2026-08-20
Public log entry: search.sigstore.dev, log index 2524617489 · entry 108e9186e8c5677ab139…
Expected log hash: 2051fcd76f2ba790414bb1c15fd4d3d064889742ea46f8e55b5028f1f571c27b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record: {"dataset_version":"v1787193158162","kind":"published-quote","locale":"fr","page":"theme:infomaniak/communication/fr","quote":"confidentialité RGPD assuré","rating":5,"review_date":"2026-07-31","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

Open the Rekor entry (pre-filled with this proof's log index).
In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (5c4849a28e86…), which ties this proof's root to the log entry.
Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.