Quote verification

This proves the quote below is recorded by Citatio exactly as displayed and has not been altered since it was committed and anchored. It documents Citatio's crawl observation; it does not imply endorsement by the source platform. The quote links to the original review.

“avec la confidentialité des données d'une société suisse”

Checks (re-run on this request)

• ✓ Signature — Ed25519 signature over the record hash, verified against the public key at /.well-known/citatio-signing.json
• ✓ Merkle inclusion — Leaf recomputed through the sibling path to the anchored root
• ✓ Public transparency log — Sigstore Rekor log index 2514654467

Proof data

Record hash (SHA-256)

3772df5e10749b2bfad172fb2c0c88da484b8e000d55eb0b274f3f035f7accf7

Signature (Ed25519, base64)

AM/41PrO9fDDR1BmwOTz8HxmM9zsSzkSjV+SKWB/bc5xfBuBXbPE2d7APdnsZtmamTJCH4n80XTxcdS1Z9uGBg==

Merkle root

2030d4ef17fc68fad1320305cf569e85a00baea931fba0d3ebe628cf9c90c35f

Merkle path

["376f0296db2c3f4a1e65622d3cec829bbda3fc9a0e7c6df538a751d2ee1964c8","744c05af24eed0b092566c7cb774924dfac29b7164ffc1000bb23742b53d2590","0e10ef8ed3e8abcd7f359e09aaac04f9b81439e84565aa2a2891825abd372a80","74e15e07b9e82d03786976bb35046c3f86f05dc66c824f93f8e5c1a697f77706","ea8ecfc98eebe68f72971a2ebd65cd887c94c5d01a99ebbf04c591abd47ad161","9085fd1ad7fd1efb5f6dcea66a8c5dc7121e4cab310ebeff1df3ae519a5ef769","7c00e886a965a6f4bd9604374d1f1b3a2b8a770dd8b7d79ac9bf5055184701bd","251f86c6e4b0b2d6db1fc8bd4d0e47e2b118014aed866b62f61685815e1b0f3e","5021102dc16ee03029ee45f24f18724682544c46f35ef4bc3ea940e2cfda471b","5a9706e7053242b5c05d9f9de3d56a03391ce90384724d4d757c52a96ef1ef62","54d61dc8ef7a7ca46cf7f7757bdafd0a7b0d8f92d723b668f28f377d7cc97d17","4c80fac9a3e2bbcf6ffb025e3533a28515475c498708bca71247f8bf54931d04","3b94761186bdb870df8b4ec2f52e7092158883022257291c3f0981e4939e9a75","bac51ea5b704b29646e9427857e311e108c5e79191194f7fff260047321ecdd7","e362b663c2c1f5a93380a04a7aa41b42f4bafc7f870e85cf63803f76c744c486"]

Anchored

2026-08-19

Public log entry

search.sigstore.dev, log index 2514654467 · entry 108e9186e8c5677a9253…

Expected log hash

ddd8d6dfa3771a4106292f7bec674337dc9649465b28b118bb17bfc2b8ff0a67 The log entry's spec.data.hash.value must equal this value: the SHA-256 of the Merkle root string above. Recompute it yourself from the root to confirm.

Canonical record

{"dataset_version":"v1787132872903","kind":"published-quote","locale":"fr","page":"product:infomaniak/public-cloud-iaas/fr","quote":"avec la confidentialité des données d'une société suisse","rating":5,"review_date":"2026-07-23","source":"Google Play","source_url":"https://play.google.com/store/apps/details?id=com.infomaniak.drive","v":1}

Verify in the public log

1. Open the Rekor entry (pre-filled with this proof's log index).
2. In the entry, compare spec.data.hash.value with the "Expected log hash" above: it is the SHA-256 of the Merkle root string (2030d4ef17fc…), which ties this proof's root to the log entry.
3. Decode spec.signature.publicKey.content from base64: it must equal Citatio's published key at /.well-known/citatio-signing.json.
4. The entry's integratedTime is the independent timestamp: the root, and with it this quote, existed no later than that moment.
5. Locally, without any Citatio infrastructure: SHA-256 the canonical record (must equal the record hash), verify the Ed25519 signature against the public key, and fold the hash through the Merkle path (sorted-pair SHA-256) to reach the anchored root.