Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“non utilisable sur GrapheneOS”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
3520514f8281ec44b87e53414801c5bd73e3a4fedc66ee316b41e20fda3e0948
Signature (Ed25519, base64)
AEmoQThcE7gUpv3cW0HizxdFluMVfPtg+PZG6EWNpIKu4UqaQewyHBwLIXcc7VFak5emqVGgw1f3EjCBP31NDQ==
Merkle root
b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path
["351b1ec36eff1fe726567498969cf66f4313c1e88b22a0a23fd9ee8bb4bd4037","ef2d17a7d0db0b25f5ae702cc1d09f30d27a6152b758daa9945ae2d606082cdd","819277337f972544fb28e841c34ccf86fbfee20353e249843f26577fd7727af3","8fa0eb3810e46a8ca60601b756cf68c666ab277751a178a72ed3d06025b97d34","0ea79968f08c63e999dc9250748388c34474ab90a255f48378940f518d6af271","fe2dc477b7d38fbb91e09c1fb6d4e58a089fd1e2986f9d131a8109f6f80a8f51","998ee08bd8ca656f16152a97fee07be32d3edf0a02e3a35903805c3a8899ded5","eea7e8f94d48dc1298595c7aa67567746d98f049a4775654b310d706533655b9","cd6ad2947eb4897b0adfcb7eb3abb07b66941de519c6c7f4fdde5f3028d1c408","d3567a40c8e72a8899ef43456a0cff93b123aae3b179d23a0a69ae26746afe98","01994c65568de78009db2a3253acb1b5ba087cb0cb6da3d5948fca3f560e14d8","06ebcf4f421280990aa40be72bace95a1c58897501e8472347512cbf61f3441a","1c4a3fbf336b1dbbe624a981829b71610e2551e155c099783fe5f318fcf85e8a","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash
687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787134378129","kind":"published-quote","locale":"fr","page":"theme:infomaniak/fit/fr","quote":"non utilisable sur GrapheneOS","rating":1,"review_date":"2026-06-08","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.swisstransfer","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.