Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“Le code OTP n'est jamais envoyé.”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2681318538

Proof data

Record hash (SHA-256)

3505b8fdf367f6f85099b6579a4ac934201c6e03db5f08eb137f8999d235b124

Signature (Ed25519, base64)

uChbR62+bvJhPReduDBNkxd0p7cN7YI2S9hiU00LhnIhUL2ODcKBX3fe2yf1nXxYQPLQg2vqvqDdjh8upenDBQ==

Merkle root

80545feed588a969110bcd2c8e526c8c2e400cad7348c7872c323a1674d2355a

Merkle path

["3503b6e8ec6e0a6a7513cacc758e37e659fc8ecc3caabc08afd1ffd79e1229bf","b590e063e1665700df3693120443679993ea9215d28d978fd0487b452aab8b2c","0c7a3a737ee583ca5eb67df0d10dc4407dc739e74b0be9ced3b9f98c2884cf9b","c6bca3311716fd244af1c1fae2ba4d6a60424d63719ea7ba6641b991ff33e660","01967eedeaff6a03cf5eab73e330d83de051f553b4ae1c919343b5802617a79d","b95ce0d00bd522df8308aee7de985e46bb5f34637a3fb88b3659c371c9a0fbc9","4ff655eb6265692f2e36907bdb41b4a24ba2c0f4db7eb210f35c5ca1521859cb","87abc35d57a6a494dea5091617bf07ec1e68485a1a42bc84ebaa41f9d95880b2","8698ad799da9a3f03b48c2f3c00ffa040f62ad55ace44ab98a2eed68634c08f4","858023d99a78a3914275af5f081621b0659976712ce7b21b50c33f1f9be0f597","8fa92f3ef0c994a8abba6fd9857bb4a70656f846f09e00dd02aeddeb4f2b3522","d3bc389941df874cd2571f89997ce8e7b19018ad59895eb4c789269357ff0a2f","4c6caa0b9a68721672e19894d208c3f84efb61f2da83a9ca4726c0d3f3e91414","8378d9d6ade0d6214a847a4a8145a9f89a0810e29d8d29962807c9aaac17e271","fca9ab6e6247b2eeb89a8619f295121cacecd7391ef0e06251791813430b969a"]

Anchored

2026-09-01

Public log entry

search.sigstore.dev, log index 2681318538 · entry 108e9186e8c5677a4bab…

Expected log hash

663cb0c78a61cc964eb6f0e00407fec6844129fb0623d2ac072b7b2e4274054b The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1788302168109","kind":"published-quote","locale":"fr","page":"brand:amag","quote":"Le code OTP n'est jamais envoyé.","rating":1,"review_date":"2026-07-19","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=ch.amag.amagallride","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (80545feed588…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.