Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“un mail d'accompagnement”

Checks (re-run on this request)

Proof data

Record hash (SHA-256)
363dad5c751abc694ed95400393671c02120c1e4b7ea45551f9f97124e7045d0
Signature (Ed25519, base64)
AJuKM/tHsMPDXV6PMR0PIOnkIhXqh0RZfXUSsG4tDK8FB1eKFGhP034yi1Dot4fk4yyffMkAh1Gn2/hIALk9Dw==
Merkle root
b6da35820db152d3d2c0cee337545e3489f0422a146fcc8c60737b1d3a3ef55c
Merkle path
["3635df2370393a6a213b9072e40335a4c6746a926ec147c13691fc223a1a40e9","7ef37ad38f834039f407fc5dd1287d89cfa73b087a52d1cb586331c3332bef73","bc7ad3dc351e3f433dcc19baf2f32cff455c9bfce09b4e4f1a85e65b76866cf7","40f2c5b0a08be50f117efc93021a56383b9e4e2135ff02e8dff7a063f8816664","d1dbfc03ba4fb00cb9bb6b96349a111257bbca9aef2f212b4a38a91eec88a9aa","a36043116d0e7c9f3d6f5bc2f9159c18986fb15efe76677e16b8023de28322c6","10c7c8d8feed6728b916088e64d8901603f600e8d8e42dea6aa0a513e4477c3c","eea7e8f94d48dc1298595c7aa67567746d98f049a4775654b310d706533655b9","cd6ad2947eb4897b0adfcb7eb3abb07b66941de519c6c7f4fdde5f3028d1c408","d3567a40c8e72a8899ef43456a0cff93b123aae3b179d23a0a69ae26746afe98","01994c65568de78009db2a3253acb1b5ba087cb0cb6da3d5948fca3f560e14d8","06ebcf4f421280990aa40be72bace95a1c58897501e8472347512cbf61f3441a","1c4a3fbf336b1dbbe624a981829b71610e2551e155c099783fe5f318fcf85e8a","0e90fbed1cd619e0c2620a1f61162a7af0ed873785a7985f4469ef4721ad000f","c54d917d90cf6041da53ed8de4347323c6a7de99e787dde7349330851a57a3d5"]
Anchored
2026-08-19
Public log entry
search.sigstore.dev, log index 2514851395 · entry 108e9186e8c5677a4f62…
Expected log hash
687a04ce8b1c63a953fd353f279012a3ef08c4ad12d885582b1b6ee85d05b900 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.
Canonical record
{"dataset_version":"v1787134378129","kind":"published-quote","locale":"fr","page":"theme:relai/communication/fr","quote":"un mail d'accompagnement","rating":5,"review_date":"2025-04-16","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.relai","v":1}

Verify in the public log

  1. Open the Rekor entry (pre-filled with this proof's log index).
  2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (b6da35820db1…), which ties this proof's root to the log entry.
  3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
  4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
  5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.